İçeriğe atla
Noroxi

CWE-1021 · 397 kayıt

Improper Restriction of Rendered UI Layers or Frames

Bu sınıftaki CVE’ler

397 kayıt

  • CVE-2021-21132
    45Planlayın

    Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox e

    KritikCVSS 9,6İstismar yokEPSS %23

    google · chrome9 Şub 2021

  • CVE-2021-43048
    39İzleyin

    TIBCO PartnerExpress Click-Jacking vulnerability

    KritikCVSS 9,8İstismar yokEPSS %1

    tibco · partnerexpress16 Kas 2021

  • CVE-2021-23274
    39İzleyin

    TIBCO API Exchange Gateway Clickjack Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %1

    tibco · api exchange gateway23 Mar 2021

  • CVE-2016-2496
    39İzleyin

    The Framework UI permission-dialog implementation in Android 6.x before 2016-06-01 allows attackers to conduct tapjacking attacks and access

    KritikCVSS 9,8İstismar yokEPSS %0

    google · android12 Haz 2016

  • CVE-2023-41897
    38İzleyin

    Lack of XFO header allows clickjacking in Home Assistant Core

    KritikCVSS 9,6İstismar yokEPSS %1

    home-assistant · home-assistant19 Eki 2023

  • CVE-2021-21111
    38İzleyin

    Insufficient policy enforcement in WebUI in Google Chrome prior to 87.0.4280.141 allowed an attacker who convinced a user to install a malic

    KritikCVSS 9,6İstismar yokEPSS %1

    google · chrome8 Oca 2021

  • CVE-2026-84388
    38İzleyin

    A improper restriction of rendered ui layers or frames vulnerability in Fortinet FortiPAM Chrome Extension 8.0 all versions, FortiPAM Chrome

    KritikCVSS 9,6Kavram kanıtıEPSS %0

    fortinet · fortipam chrome extension22 Eyl 2026

  • CVE-2024-10004
    36İzleyin

    Opening an external link to an HTTP website when Firefox iOS was previously closed and had an HTTPS tab open could in some cases result in t

    KritikCVSS 9,1İstismar yokEPSS %0

    mozilla · firefox15 Eki 2024

  • CVE-2018-18496
    35İzleyin

    When the RSS Feed preview about:feeds page is framed within another page, it can be used in concert with scripted content for a clickjacking

    YüksekCVSS 8,8İstismar yokEPSS %1

    mozilla · firefox28 Şub 2019

  • CVE-2022-3167
    35İzleyin

    Improper Restriction of Rendered UI Layers or Frames in ikus060/rdiffweb

    YüksekCVSS 8,8İstismar yokEPSS %1

    ikus-soft · rdiffweb8 Eyl 2022

  • CVE-2021-3734
    35İzleyin

    Improper Restriction of Rendered UI Layers or Frames in yourls/yourls

    YüksekCVSS 8,8İstismar yokEPSS %0

    yourls · yourls26 Ağu 2021

  • CVE-2026-0007
    34İzleyin

    In writeToParcel of WindowInfo.cpp, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack.

    YüksekCVSS 8,6İstismar yokEPSS %0

    google · android2 Mar 2026

  • CVE-2019-16371
    32İzleyin

    LogMeIn LastPass before 4.33.0 allows attackers to construct a crafted web site that captures the credentials for a victim's account on a pr

    YüksekCVSS 8,2İstismar yokEPSS %1

    logmein · lastpass16 Eyl 2019

  • CVE-2020-7705
    32İzleyin

    This affects the package MintegralAdSDK from 0.0.0.

    YüksekCVSS 8,1İstismar yokEPSS %1

    mintegral · mintegraladsdk24 Ağu 2020

  • CVE-2021-23976
    32İzleyin

    When accepting a malicious intent from other installed apps, Firefox for Android accepted manifests from arbitrary file paths and allowed de

    YüksekCVSS 8,1İstismar yokEPSS %1

    mozilla · firefox25 Şub 2021

  • CVE-2021-44683
    32İzleyin

    The DuckDuckGo browser 7.64.4 on iOS allows Address Bar Spoofing due to mishandling of the JavaScript window.open function (used to open a s

    YüksekCVSS 8,2İstismar yokEPSS %0

    duckduckgo · duckduckgo25 Mar 2022

  • CVE-2020-13119
    32İzleyin

    ismartgate PRO 1.5.9 is vulnerable to clickjacking.

    YüksekCVSS 8,1İstismar yokEPSS %0

    gogogate · ismartgate pro firmware24 Eyl 2020

  • CVE-2026-58595
    32İzleyin

    Microsoft Bing App for IOS Spoofing Vulnerability

    YüksekCVSS 8,1İstismar yokEPSS %0

    microsoft · bing search14 Tem 2026

  • CVE-2021-0433
    32İzleyin

    In onCreate of DeviceChooserActivity.java, there is a possible way to bypass user consent when pairing a Bluetooth device due to a tapjackin

    YüksekCVSS 8,0Kavram kanıtıEPSS %0

    google · android13 Nis 2021

  • CVE-2024-11700
    32İzleyin

    Malicious websites may have been able to perform user intent confirmation through tapjacking.

    YüksekCVSS 8,1İstismar yokEPSS %0

    mozilla · firefox26 Kas 2024

  • CVE-2024-33377
    32İzleyin

    LB-LINK BL-W1210M v2.0 was discovered to contain a clickjacking vulnerability via the Administrator login page.

    YüksekCVSS 8,1İstismar yokEPSS %0

    lb-link · bl-w1210m firmware14 Haz 2024

  • CVE-2026-74978
    32İzleyin

    Clickjacking issue in the Widget component

    YüksekCVSS 8,1İstismar yokEPSS %0

    mozilla · firefox18 Ağu 2026

  • CVE-2026-22918
    32İzleyin

    An attacker may exploit missing protection against clickjacking by tricking users into performing unintended actions through maliciously cra

    YüksekCVSS 8,2İstismar yokEPSS %0

    sick · tdc-x401gl firmware15 Oca 2026

  • CVE-2024-7523
    32İzleyin

    A select option could partially obscure security prompts.

    YüksekCVSS 8,1İstismar yokEPSS %0

    mozilla · firefox mobile6 Ağu 2024

  • CVE-2021-39692
    31İzleyin

    In onCreate of SetupLayoutActivity.java, there is a possible way to setup a work profile bypassing user consent due to a tapjacking/overlay

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    google · android16 Mar 2022

Tüm zafiyet sınıfları