CWE-451

User Interface (UI) Misrepresentation of Critical Information

Parent: CWE-684 - Incorrect Provision of Specified Functionality

The user interface (UI) does not properly represent critical information to the user, allowing the information - or its source - to be obscured or spoofed. This is often a component in phishing attacks.

230 vulnerabilities with CWE-451
CVE-2025-31266 MEDIUM
Safari < 18.5 and macOS < 15.5 - Domain Spoofing via Pop-up Window Title
CVSS 4.3
CVE-2025-13082 MEDIUM
Drupal Drupal core <11.2.8 - Content Spoofing
CVSS 4.3
CVE-2025-13107 MEDIUM
Chrome < 140.0.7339.80 - UI Spoofing via Compositing
CVSS 4.3
CVE-2025-13102 MEDIUM
Google Chrome < 134.0.6998.35 - UI Spoofing via WebApp Installs
CVSS 4.3
CVE-2025-12729 MEDIUM
Google Chrome <142.0.7444.137 - XSS
CVSS 4.2
CVE-2025-12728 MEDIUM
Google Chrome <142.0.7444.137 - XSS
CVSS 4.2
CVE-2025-12446 MEDIUM
Google Chrome <142.0.7444.59 - CSRF
CVSS 4.2
CVE-2025-12435 MEDIUM
Google Chrome < 142.0.7444.59 - Security UI Spoofing via Omnibox
CVSS 5.4
CVE-2025-12911 MEDIUM
Google Chrome < 140.0.7339.80 - UI Spoofing via Crafted HTML Page
CVSS 4.3
CVE-2025-11213 MEDIUM
Google Chrome <141.0.7390.54 - SSRF
CVSS 6.3
CVE-2025-11212 MEDIUM
Google Chrome <141.0.7390.54 - SSRF
CVSS 6.3
CVE-2025-11208 MEDIUM
Google Chrome < 141.0.7390.54 - UI Spoofing via Crafted HTML Page
CVSS 6.3
CVE-2025-11720 HIGH
Firefox < 144.0 - User Interface Misrepresentation of Critical Information in Android Custom Tab
CVSS 8.1
CVE-2025-11718 MEDIUM
Firefox < 144.0 - User Interface Misrepresentation via Fake Address Bar on Android
CVSS 6.5
CVE-2025-10290 MEDIUM
Mozilla Focus for iOS < 143.0 - User Interface Misrepresentation via Contextual Menu URL Spoofing
CVSS 6.5
CVE-2025-43327 MEDIUM
Safari < 26.0 - Address Bar Spoofing via Malicious Website
CVSS 6.5
CVE-2025-9867 MEDIUM
Google Chrome < 140.0.7339.80 - UI Spoofing via Crafted HTML Page
CVSS 5.4
CVE-2025-9865 MEDIUM
Google Chrome <140.0.7339.80 - SSRF
CVSS 5.4
CVE-2025-9491 HIGH
Windows 11 23H2 - Remote Code Execution via LNK File UI Misrepresentation
CVSS 7.8
CVE-2025-9186 MEDIUM
Firefox < 142.0 - Address Bar Spoofing
CVSS 6.5
CVE-2025-9183 MEDIUM
Firefox < 142.0 and 140.2-140.* - Address Bar Spoofing
CVSS 6.5
CVE-2025-8364 MEDIUM
Firefox < 141.0 - URL Spoofing via Blob URI
CVSS 4.3
CVE-2025-8041 MEDIUM
Firefox < 141.0 - URL Origin Misrepresentation in Address Bar
CVSS 5.3
CVE-2025-49755 MEDIUM
Microsoft Edge for Android - Info Disclosure
CVSS 4.3
CVE-2025-8583 MEDIUM
Google Chrome < 139.0.7258.66 - UI Spoofing via Permissions Implementation
CVSS 4.3
Details
Vulnerabilities 230
Links
MITRE CWE Entry Search this CWE With Exploits