CWE-451 · 480 kayıt
User Interface (UI) Misrepresentation of Critical Information
Bu sınıftaki CVE’ler
480 kayıt
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
85Hemen | CVE-2024-38112Silahlaştırılmış | Windows MSHTML Platform Spoofing Vulnerabilitymicrosoft · windows 10 1507 · CWE-451 | Yüksek7,5 | KEV | %84,2 | 9 Tem 2024 |
81Hemen | CVE-2024-43461Silahlaştırılmış | Windows MSHTML Platform Spoofing Vulnerabilitymicrosoft · windows 10 1507 · CWE-451 | Yüksek8,8 | KEV | %54,2 | 10 Eyl 2024 |
42Planlayın | CVE-2026-0907İstismar yok | Incorrect security UI in Split View in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to perform UI spoofing via a crafted Hgoogle · chrome · CWE-451 | Kritik9,8 | — | %8,8 | 20 Oca 2026 |
41Planlayın | CVE-2025-9491Kavram kanıtı | Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerabilitymicrosoft · windows 11 23h2 · CWE-451 | Orta4,6 | — | %75,9 | 26 Ağu 2025 |
39İzleyin | CVE-2025-8043İstismar yok | Incorrect URL truncationmozilla · firefox · CWE-451 | Kritik9,8 | — | %0,4 | 22 Tem 2025 |
39İzleyin | CVE-2026-2634İstismar yok | Spoofed web content presented under trusted domains using scripted navigation on Firefox iOSmozilla · firefox · CWE-451 | Kritik9,8 | — | %0,3 | 24 Şub 2026 |
39İzleyin | CVE-2026-0906İstismar yok | Incorrect security UI in Google Chrome on Android prior to 144.0.7559.59 allowed a remote attacker to spoof the contents of the Omnibox (URgoogle · chrome · CWE-451 | Kritik9,8 | — | %0,3 | 20 Oca 2026 |
38İzleyin | CVE-2026-113138İstismar yok | UI misrepresentation in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to spgoogle · chrome · CWE-451 | Kritik9,6 | — | %0,3 | 20 Eki 2026 |
38İzleyin | CVE-2026-113171İstismar yok | UI misrepresentation in Prompts in Google Chrome on on Android prior to 156.0.8078.47 allowed a local attacker leveraging social engineeringgoogle · chrome · CWE-451 | Kritik9,6 | — | %0,2 | 20 Eki 2026 |
38İzleyin | CVE-2026-113169İstismar yok | UI misrepresentation in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a local attacker leveraging social engigoogle · chrome · CWE-451 | Kritik9,6 | — | %0,2 | 20 Eki 2026 |
36İzleyin | CVE-2026-118027İstismar yok | Frame poisoning in the Layout componentmozilla · firefox · CWE-451 | Kritik9,1 | — | %0,2 | 27 Eki 2026 |
35İzleyin | CVE-2021-41598İstismar yok | UI misrepresentation of granted permissions in GitHub Enterprise Server leading to unauthorized access to usergithub · enterprise server · CWE-451 | Yüksek8,8 | — | %1,1 | 25 Oca 2022 |
35İzleyin | CVE-2021-22866İstismar yok | UI misrepresentation of granted permissions in GitHub Enterprise Server leading to unauthorized access to user resourcesgithub · enterprise server · CWE-451 | Yüksek8,8 | — | %1,0 | 14 May 2021 |
35İzleyin | CVE-2024-0750İstismar yok | A bug in popup notifications delay calculation could have made it possible for an attacker to trick a user into granting permissions.mozilla · firefox · CWE-451 | Yüksek8,8 | — | %0,8 | 23 Oca 2024 |
35İzleyin | CVE-2026-114171İstismar yok | Visual Studio Code Security Feature Bypass Vulnerabilitymicrosoft · visual studio code · CWE-451 | Yüksek8,8 | — | %0,8 | 4 gün önce |
35İzleyin | CVE-2020-9236İstismar yok | There is an improper interface design vulnerability in Huawei product.huawei · fusioncompute · CWE-451 | Yüksek8,8 | — | %0,4 | 27 Ara 2024 |
35İzleyin | CVE-2026-113156İstismar yok | UI misrepresentation in Messages in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a google · chrome · CWE-451 | Yüksek8,8 | — | %0,3 | 20 Eki 2026 |
35İzleyin | CVE-2026-113088İstismar yok | UI misrepresentation in Mobile in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crgoogle · chrome · CWE-451 | Yüksek8,8 | — | %0,3 | 20 Eki 2026 |
35İzleyin | CVE-2026-113145İstismar yok | UI misrepresentation in Messages in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a google · chrome · CWE-451 | Yüksek8,8 | — | %0,3 | 20 Eki 2026 |
35İzleyin | CVE-2026-113320İstismar yok | UI misrepresentation in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker leveraging social engineeringgoogle · chrome · CWE-451 | Yüksek8,8 | — | %0,3 | 20 Eki 2026 |
35İzleyin | CVE-2026-113182İstismar yok | UI misrepresentation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to spoof Ugoogle · chrome · CWE-451 | Yüksek8,8 | — | %0,3 | 20 Eki 2026 |
35İzleyin | CVE-2026-113206İstismar yok | UI misrepresentation in Omnibox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTML pagoogle · chrome · CWE-451 | Yüksek8,8 | — | %0,3 | 20 Eki 2026 |
35İzleyin | CVE-2026-113096İstismar yok | UI misrepresentation in Text in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderegoogle · chrome · CWE-451 | Yüksek8,8 | — | %0,3 | 20 Eki 2026 |
35İzleyin | CVE-2026-113312İstismar yok | UI misrepresentation in Autofill in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafgoogle · chrome · CWE-451 | Yüksek8,8 | — | %0,3 | 20 Eki 2026 |
35İzleyin | CVE-2026-113055İstismar yok | UI misrepresentation in FullScreen in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via google · chrome · CWE-451 | Yüksek8,8 | — | %0,3 | 20 Eki 2026 |
- CVE-2024-3811285Hemen
Windows MSHTML Platform Spoofing Vulnerability
YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %84microsoft · windows 10 15079 Tem 2024
- CVE-2024-4346181Hemen
Windows MSHTML Platform Spoofing Vulnerability
YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %54microsoft · windows 10 150710 Eyl 2024
- CVE-2026-090742Planlayın
Incorrect security UI in Split View in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to perform UI spoofing via a crafted H
KritikCVSS 9,8İstismar yokEPSS %8google · chrome20 Oca 2026
- CVE-2025-949141Planlayın
Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability
OrtaCVSS 4,6Kavram kanıtıEPSS %75microsoft · windows 11 23h226 Ağu 2025
- CVE-2025-804339İzleyin
Incorrect URL truncation
KritikCVSS 9,8İstismar yokEPSS %0mozilla · firefox22 Tem 2025
- CVE-2026-263439İzleyin
Spoofed web content presented under trusted domains using scripted navigation on Firefox iOS
KritikCVSS 9,8İstismar yokEPSS %0mozilla · firefox24 Şub 2026
- CVE-2026-090639İzleyin
Incorrect security UI in Google Chrome on Android prior to 144.0.7559.59 allowed a remote attacker to spoof the contents of the Omnibox (UR
KritikCVSS 9,8İstismar yokEPSS %0google · chrome20 Oca 2026
- CVE-2026-11313838İzleyin
UI misrepresentation in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to sp
KritikCVSS 9,6İstismar yokEPSS %0google · chrome20 Eki 2026
- CVE-2026-11317138İzleyin
UI misrepresentation in Prompts in Google Chrome on on Android prior to 156.0.8078.47 allowed a local attacker leveraging social engineering
KritikCVSS 9,6İstismar yokEPSS %0google · chrome20 Eki 2026
- CVE-2026-11316938İzleyin
UI misrepresentation in WebAppInstalls in Google Chrome on on Android prior to 156.0.8078.47 allowed a local attacker leveraging social engi
KritikCVSS 9,6İstismar yokEPSS %0google · chrome20 Eki 2026
- CVE-2026-11802736İzleyin
Frame poisoning in the Layout component
KritikCVSS 9,1İstismar yokEPSS %0mozilla · firefox27 Eki 2026
- CVE-2021-4159835İzleyin
UI misrepresentation of granted permissions in GitHub Enterprise Server leading to unauthorized access to user
YüksekCVSS 8,8İstismar yokEPSS %1github · enterprise server25 Oca 2022
- CVE-2021-2286635İzleyin
UI misrepresentation of granted permissions in GitHub Enterprise Server leading to unauthorized access to user resources
YüksekCVSS 8,8İstismar yokEPSS %1github · enterprise server14 May 2021
- CVE-2024-075035İzleyin
A bug in popup notifications delay calculation could have made it possible for an attacker to trick a user into granting permissions.
YüksekCVSS 8,8İstismar yokEPSS %0mozilla · firefox23 Oca 2024
- CVE-2026-11417135İzleyin
Visual Studio Code Security Feature Bypass Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0microsoft · visual studio code4 gün önce
- CVE-2020-923635İzleyin
There is an improper interface design vulnerability in Huawei product.
YüksekCVSS 8,8İstismar yokEPSS %0huawei · fusioncompute27 Ara 2024
- CVE-2026-11315635İzleyin
UI misrepresentation in Messages in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a
YüksekCVSS 8,8İstismar yokEPSS %0google · chrome20 Eki 2026
- CVE-2026-11308835İzleyin
UI misrepresentation in Mobile in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a cr
YüksekCVSS 8,8İstismar yokEPSS %0google · chrome20 Eki 2026
- CVE-2026-11314535İzleyin
UI misrepresentation in Messages in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a
YüksekCVSS 8,8İstismar yokEPSS %0google · chrome20 Eki 2026
- CVE-2026-11332035İzleyin
UI misrepresentation in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering
YüksekCVSS 8,8İstismar yokEPSS %0google · chrome20 Eki 2026
- CVE-2026-11318235İzleyin
UI misrepresentation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to spoof U
YüksekCVSS 8,8İstismar yokEPSS %0google · chrome20 Eki 2026
- CVE-2026-11320635İzleyin
UI misrepresentation in Omnibox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTML pa
YüksekCVSS 8,8İstismar yokEPSS %0google · chrome20 Eki 2026
- CVE-2026-11309635İzleyin
UI misrepresentation in Text in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker who had compromised the rendere
YüksekCVSS 8,8İstismar yokEPSS %0google · chrome20 Eki 2026
- CVE-2026-11331235İzleyin
UI misrepresentation in Autofill in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a craf
YüksekCVSS 8,8İstismar yokEPSS %0google · chrome20 Eki 2026
- CVE-2026-11305535İzleyin
UI misrepresentation in FullScreen in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via
YüksekCVSS 8,8İstismar yokEPSS %0google · chrome20 Eki 2026