CWE-449 · 14 records

The UI Performs the Wrong Action

CVEs in this class

14 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
26Monitor	CVE-2023-36535No exploit	Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow an authenticated user to enable information discloszoom · rooms · CWE-449	Medium6.5	—	1.2%	Aug 8, 2023
26Monitor	CVE-2023-39215No exploit	Improper authentication in Zoom clients may allow an authenticated user to conduct a denial of service via network access.zoom · meeting software development kit · CWE-449 Auth bypass Denial of service	Medium6.5	—	1.1%	Sep 12, 2023
26Monitor	CVE-2023-39209No exploit	Improper input validation in Zoom Desktop Client for Windows before 5.15.5 may allow an authenticated user to enable an information disclosuzoom · zoom · CWE-449	Medium6.5	—	1.0%	Aug 8, 2023
26Monitor	CVE-2023-43588No exploit	Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information disclosure via network azoom · meetings · CWE-449	Medium6.5	—	0.7%	Nov 14, 2023
26Monitor	CVE-2023-43585No exploit	Improper access control in Zoom Mobile App for iOS and Zoom SDKs for iOS before version 5.16.5 may allow an authenticated user to conduct a zoom · meeting software development kit · CWE-449	Medium6.5	—	0.6%	Dec 13, 2023
21Monitor	CVE-2025-26643No exploit	Microsoft Edge (Chromium-based) Spoofing Vulnerabilitymicrosoft · edge chromium · CWE-449 Pre-auth	Medium5.4	—	0.7%	Mar 7, 2025
21Monitor	CVE-2025-56139No exploit	LinkedIn Mobile Application for Android version 4.1.1087.2 fails to update link preview metadata (image, title, description) when a user replinkedin · linkedin · CWE-449 Pre-auth Denial of service	Medium5.3	—	0.3%	Sep 3, 2025
17Monitor	CVE-2025-21404No exploit	Microsoft Edge (Chromium-based) Spoofing Vulnerabilitymicrosoft · edge chromium · CWE-449 Pre-auth	Medium4.3	—	1.1%	Feb 6, 2025
17Monitor	CVE-2024-49041No exploit	Microsoft Edge (Chromium-based) Spoofing Vulnerabilitymicrosoft · edge chromium · CWE-449 Pre-auth	Medium4.3	—	1.0%	Dec 5, 2024
17Monitor	CVE-2024-24698No exploit	Zoom Clients - Improper Authenticationzoom · meeting software development kit · CWE-449 Auth bypass Local privilege escalation	Medium4.4	—	0.5%	Feb 13, 2024
17Monitor	CVE-2025-49736No exploit	Microsoft Edge (Chromium-based) for Android Spoofing Vulnerabilitymicrosoft · edge · CWE-449 Pre-auth	Medium4.3	—	0.5%	Aug 12, 2025
17Monitor	CVE-2024-38083No exploit	Microsoft Edge (Chromium-based) Spoofing Vulnerabilitymicrosoft · edge chromium · CWE-449 Pre-auth	Medium4.3	—	0.5%	Jun 13, 2024
17Monitor	CVE-2024-43577No exploit	Microsoft Edge (Chromium-based) Spoofing Vulnerabilitymicrosoft · edge chromium · CWE-449 Pre-auth	Medium4.3	—	0.5%	Oct 18, 2024
17Monitor	CVE-2025-13637No exploit	Inappropriate implementation in Downloads in Google Chrome prior to 143.0.7499.41 allowed a remote attacker who convinced a user to engage igoogle · chrome · CWE-449 Pre-auth	Medium4.3	—	0.2%	Dec 2, 2025

CVE-2023-36535
26Monitor
Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow an authenticated user to enable information disclos
MediumCVSS 6.5No exploitEPSS 1%
zoom · roomsAug 8, 2023
CVE-2023-39215
26Monitor
Improper authentication in Zoom clients may allow an authenticated user to conduct a denial of service via network access.
MediumCVSS 6.5No exploitEPSS 1%
- Auth bypass
- Denial of service
zoom · meeting software development kitSep 12, 2023
CVE-2023-39209
26Monitor
Improper input validation in Zoom Desktop Client for Windows before 5.15.5 may allow an authenticated user to enable an information disclosu
MediumCVSS 6.5No exploitEPSS 1%
zoom · zoomAug 8, 2023
CVE-2023-43588
26Monitor
Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information disclosure via network a
MediumCVSS 6.5No exploitEPSS 1%
zoom · meetingsNov 14, 2023
CVE-2023-43585
26Monitor
Improper access control in Zoom Mobile App for iOS and Zoom SDKs for iOS before version 5.16.5 may allow an authenticated user to conduct a
MediumCVSS 6.5No exploitEPSS 1%
zoom · meeting software development kitDec 13, 2023
CVE-2025-26643
21Monitor
Microsoft Edge (Chromium-based) Spoofing Vulnerability
MediumCVSS 5.4No exploitEPSS 1%
- Pre-auth
microsoft · edge chromiumMar 7, 2025
CVE-2025-56139
21Monitor
LinkedIn Mobile Application for Android version 4.1.1087.2 fails to update link preview metadata (image, title, description) when a user rep
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- Denial of service
linkedin · linkedinSep 3, 2025
CVE-2025-21404
17Monitor
Microsoft Edge (Chromium-based) Spoofing Vulnerability
MediumCVSS 4.3No exploitEPSS 1%
- Pre-auth
microsoft · edge chromiumFeb 6, 2025
CVE-2024-49041
17Monitor
Microsoft Edge (Chromium-based) Spoofing Vulnerability
MediumCVSS 4.3No exploitEPSS 1%
- Pre-auth
microsoft · edge chromiumDec 5, 2024
CVE-2024-24698
17Monitor
Zoom Clients - Improper Authentication
MediumCVSS 4.4No exploitEPSS 1%
- Auth bypass
- Local privilege escalation
zoom · meeting software development kitFeb 13, 2024
CVE-2025-49736
17Monitor
Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
MediumCVSS 4.3No exploitEPSS 1%
- Pre-auth
microsoft · edgeAug 12, 2025
CVE-2024-38083
17Monitor
Microsoft Edge (Chromium-based) Spoofing Vulnerability
MediumCVSS 4.3No exploitEPSS 0%
- Pre-auth
microsoft · edge chromiumJun 13, 2024
CVE-2024-43577
17Monitor
Microsoft Edge (Chromium-based) Spoofing Vulnerability
MediumCVSS 4.3No exploitEPSS 0%
- Pre-auth
microsoft · edge chromiumOct 18, 2024
CVE-2025-13637
17Monitor
Inappropriate implementation in Downloads in Google Chrome prior to 143.0.7499.41 allowed a remote attacker who convinced a user to engage i
MediumCVSS 4.3No exploitEPSS 0%
- Pre-auth
google · chromeDec 2, 2025

All vulnerability classes