CWE-451

User Interface (UI) Misrepresentation of Critical Information

Parent: CWE-684 - Incorrect Provision of Specified Functionality

The user interface (UI) does not properly represent critical information to the user, allowing the information - or its source - to be obscured or spoofed. This is often a component in phishing attacks.

343 vulnerabilities with CWE-451
CVE-2024-55896 MEDIUM
IBM PowerHA SystemMirror - Info Disclosure
CVSS 5.4
CVE-2024-55889 MEDIUM
phpMyFAQ < 3.2.10 - Unauthenticated File Download via FAQ Record Iframe Embed
CVSS 4.9
CVE-2024-52271 HIGH
Documenso <1.8.0 - Content Spoofing
CVE-2024-52270 HIGH
DropBox Sign(HelloSign) <2024-12-04 - Content Spoofing
CVE-2024-52269 HIGH
DocuSign <2024-12-04 - Content Spoofing
CVSS 8.1
CVE-2024-52277 HIGH
DocuSeal <= 1.8.1 - Content Spoofing via Layered Document Rendering
CVE-2024-52276 HIGH
DocuSign < 2024-12-04 - Content Spoofing via Layer Flattening Misrepresentation
CVSS 7.5
CVE-2024-49040 HIGH
Microsoft Exchange Server - Spoofing via UI Misrepresentation
CVSS 7.5
CVE-2024-51749 LOW
Element Web < 1.11.85 - User Interface Misrepresentation via Thumbnail Coherence Bypass
CVSS 3.5
CVE-2024-47044 MEDIUM
NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION - Info Disclosure
CVSS 5.3
CVE-2024-7020 MEDIUM
Google Chrome < 124.0.6367.60 - UI Spoofing via Autofill
CVSS 4.3
CVE-2024-7019 MEDIUM
Google Chrome < 124.0.6367.60 - UI Spoofing via Crafted HTML Page
CVSS 4.3
CVE-2024-8909 MEDIUM
Google Chrome <129.0.6668.58 - CSRF
CVSS 4.3
CVE-2024-43461 HIGH KEV
Windows MSHTML Platform - Spoofing
CVSS 8.8
CVE-2024-38197 MEDIUM
Microsoft Teams for iOS < 6.19.2 - User Interface Spoofing
CVSS 6.5
CVE-2024-6999 MEDIUM
Google Chrome < 127.0.6533.72 - UI Spoofing via FedCM Implementation
CVSS 4.3
CVE-2024-7529 MEDIUM
Firefox < 129 and Firefox ESR < 115.14 - UI Misrepresentation via Date Picker Overlay
CVSS 6.5
CVE-2024-6595 LOW
GitLab CE/EE <16.11.6/<17.0.4/<17.1.2 - Info Disclosure
CVSS 3.0
CVE-2024-38112 HIGH KEV
Windows MSHTML Platform - Spoofing
CVSS 7.5
CVE-2024-6610 MEDIUM
Firefox and Thunderbird < 128.0 - UI Misrepresentation via Form Validation Popup Escape Key Capture
CVSS 4.3
CVE-2024-38093 MEDIUM
Microsoft Edge < 126.0.2592.68 - Spoofing via UI Misrepresentation
CVSS 4.3
CVE-2024-38082 MEDIUM
Microsoft Edge < 126.0.2592.68 - User Interface Spoofing
CVSS 4.7
CVE-2024-38313 MEDIUM
Firefox for iOS < 127 - Info Disclosure
CVSS 4.3
CVE-2024-5698 MEDIUM
Firefox < 127 - User Interface Misrepresentation via Fullscreen Data-List Overlay
CVSS 6.1
CVE-2024-4950 MEDIUM
Google Chrome < 125.0.6422.60 - UI Spoofing via Crafted HTML Page
CVSS 6.5
Details
Vulnerabilities 343
Links
MITRE CWE Entry Search this CWE With Exploits