CWE-449 · 14 kayıt

The UI Performs the Wrong Action

Bu sınıftaki CVE’ler

14 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
26İzleyin	CVE-2023-36535İstismar yok	Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow an authenticated user to enable information discloszoom · rooms · CWE-449	Orta6,5	—	%1,2	8 Ağu 2023
26İzleyin	CVE-2023-39215İstismar yok	Improper authentication in Zoom clients may allow an authenticated user to conduct a denial of service via network access.zoom · meeting software development kit · CWE-449 Kimlik doğrulama atlatma Hizmet dışı bırakma	Orta6,5	—	%1,1	12 Eyl 2023
26İzleyin	CVE-2023-39209İstismar yok	Improper input validation in Zoom Desktop Client for Windows before 5.15.5 may allow an authenticated user to enable an information disclosuzoom · zoom · CWE-449	Orta6,5	—	%1,0	8 Ağu 2023
26İzleyin	CVE-2023-43588İstismar yok	Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information disclosure via network azoom · meetings · CWE-449	Orta6,5	—	%0,7	14 Kas 2023
26İzleyin	CVE-2023-43585İstismar yok	Improper access control in Zoom Mobile App for iOS and Zoom SDKs for iOS before version 5.16.5 may allow an authenticated user to conduct a zoom · meeting software development kit · CWE-449	Orta6,5	—	%0,6	13 Ara 2023
21İzleyin	CVE-2025-26643İstismar yok	Microsoft Edge (Chromium-based) Spoofing Vulnerabilitymicrosoft · edge chromium · CWE-449 Kimlik doğrulamasız	Orta5,4	—	%0,7	7 Mar 2025
21İzleyin	CVE-2025-56139İstismar yok	LinkedIn Mobile Application for Android version 4.1.1087.2 fails to update link preview metadata (image, title, description) when a user replinkedin · linkedin · CWE-449 Kimlik doğrulamasız Hizmet dışı bırakma	Orta5,3	—	%0,3	3 Eyl 2025
17İzleyin	CVE-2025-21404İstismar yok	Microsoft Edge (Chromium-based) Spoofing Vulnerabilitymicrosoft · edge chromium · CWE-449 Kimlik doğrulamasız	Orta4,3	—	%1,1	6 Şub 2025
17İzleyin	CVE-2024-49041İstismar yok	Microsoft Edge (Chromium-based) Spoofing Vulnerabilitymicrosoft · edge chromium · CWE-449 Kimlik doğrulamasız	Orta4,3	—	%1,0	5 Ara 2024
17İzleyin	CVE-2024-24698İstismar yok	Zoom Clients - Improper Authenticationzoom · meeting software development kit · CWE-449 Kimlik doğrulama atlatma Yerel yetki yükseltme	Orta4,4	—	%0,5	13 Şub 2024
17İzleyin	CVE-2025-49736İstismar yok	Microsoft Edge (Chromium-based) for Android Spoofing Vulnerabilitymicrosoft · edge · CWE-449 Kimlik doğrulamasız	Orta4,3	—	%0,5	12 Ağu 2025
17İzleyin	CVE-2024-38083İstismar yok	Microsoft Edge (Chromium-based) Spoofing Vulnerabilitymicrosoft · edge chromium · CWE-449 Kimlik doğrulamasız	Orta4,3	—	%0,5	13 Haz 2024
17İzleyin	CVE-2024-43577İstismar yok	Microsoft Edge (Chromium-based) Spoofing Vulnerabilitymicrosoft · edge chromium · CWE-449 Kimlik doğrulamasız	Orta4,3	—	%0,5	18 Eki 2024
17İzleyin	CVE-2025-13637İstismar yok	Inappropriate implementation in Downloads in Google Chrome prior to 143.0.7499.41 allowed a remote attacker who convinced a user to engage igoogle · chrome · CWE-449 Kimlik doğrulamasız	Orta4,3	—	%0,2	2 Ara 2025

CVE-2023-36535
26İzleyin
Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow an authenticated user to enable information disclos
OrtaCVSS 6,5İstismar yokEPSS %1
zoom · rooms8 Ağu 2023
CVE-2023-39215
26İzleyin
Improper authentication in Zoom clients may allow an authenticated user to conduct a denial of service via network access.
OrtaCVSS 6,5İstismar yokEPSS %1
- Kimlik doğrulama atlatma
- Hizmet dışı bırakma
zoom · meeting software development kit12 Eyl 2023
CVE-2023-39209
26İzleyin
Improper input validation in Zoom Desktop Client for Windows before 5.15.5 may allow an authenticated user to enable an information disclosu
OrtaCVSS 6,5İstismar yokEPSS %1
zoom · zoom8 Ağu 2023
CVE-2023-43588
26İzleyin
Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information disclosure via network a
OrtaCVSS 6,5İstismar yokEPSS %1
zoom · meetings14 Kas 2023
CVE-2023-43585
26İzleyin
Improper access control in Zoom Mobile App for iOS and Zoom SDKs for iOS before version 5.16.5 may allow an authenticated user to conduct a
OrtaCVSS 6,5İstismar yokEPSS %1
zoom · meeting software development kit13 Ara 2023
CVE-2025-26643
21İzleyin
Microsoft Edge (Chromium-based) Spoofing Vulnerability
OrtaCVSS 5,4İstismar yokEPSS %1
- Kimlik doğrulamasız
microsoft · edge chromium7 Mar 2025
CVE-2025-56139
21İzleyin
LinkedIn Mobile Application for Android version 4.1.1087.2 fails to update link preview metadata (image, title, description) when a user rep
OrtaCVSS 5,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- Hizmet dışı bırakma
linkedin · linkedin3 Eyl 2025
CVE-2025-21404
17İzleyin
Microsoft Edge (Chromium-based) Spoofing Vulnerability
OrtaCVSS 4,3İstismar yokEPSS %1
- Kimlik doğrulamasız
microsoft · edge chromium6 Şub 2025
CVE-2024-49041
17İzleyin
Microsoft Edge (Chromium-based) Spoofing Vulnerability
OrtaCVSS 4,3İstismar yokEPSS %1
- Kimlik doğrulamasız
microsoft · edge chromium5 Ara 2024
CVE-2024-24698
17İzleyin
Zoom Clients - Improper Authentication
OrtaCVSS 4,4İstismar yokEPSS %1
- Kimlik doğrulama atlatma
- Yerel yetki yükseltme
zoom · meeting software development kit13 Şub 2024
CVE-2025-49736
17İzleyin
Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
OrtaCVSS 4,3İstismar yokEPSS %1
- Kimlik doğrulamasız
microsoft · edge12 Ağu 2025
CVE-2024-38083
17İzleyin
Microsoft Edge (Chromium-based) Spoofing Vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0
- Kimlik doğrulamasız
microsoft · edge chromium13 Haz 2024
CVE-2024-43577
17İzleyin
Microsoft Edge (Chromium-based) Spoofing Vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0
- Kimlik doğrulamasız
microsoft · edge chromium18 Eki 2024
CVE-2025-13637
17İzleyin
Inappropriate implementation in Downloads in Google Chrome prior to 143.0.7499.41 allowed a remote attacker who convinced a user to engage i
OrtaCVSS 4,3İstismar yokEPSS %0
- Kimlik doğrulamasız
google · chrome2 Ara 2025

Tüm zafiyet sınıfları