# CWE-449.

Every Advisory and CVE whose sources give the weakness CWE-449, newest first.

## Records, newest first

- [Google Chrome: Inappropriate implementation in Downloads in Google Chrome prior to 143.0.7499.41 allowed…](https://agentprime.io/advisories/CVE-2025-13637.md)
  `CVE-2025-13637` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 2 Dec 2025 · Tags: CWE-449
- [LinkedIn Mobile Application for Android version 4.1.1087.2 fails to update link preview metadata (image, title, description) when a user replaces the original URL in a post or comment before publishi…](https://agentprime.io/advisories/CVE-2025-56139.md)
  `CVE-2025-56139` · CVE record · CVSS 5.3 Medium · Not analysed yet · Published 3 Sept 2025 · Tags: CWE-449
- [Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2025-49736.md)
  `CVE-2025-49736` · CVE record: Microsoft Microsoft Edge for Android · CVSS 4.3 Medium · Not analysed yet · Published 12 Aug 2025 · Tags: CWE-449
- [Microsoft Edge (Chromium-based) Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2025-26643.md)
  `CVE-2025-26643` · CVE record: Microsoft Microsoft Edge (Chromium-based) · CVSS 5.4 Medium · Not analysed yet · Published 7 Mar 2025 · Tags: CWE-449
- [Microsoft Edge (Chromium-based) Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2025-21404.md)
  `CVE-2025-21404` · CVE record: Microsoft Microsoft Edge (Chromium-based) · CVSS 4.3 Medium · Not analysed yet · Published 6 Feb 2025 · Tags: CWE-449, CWE-451
- [Microsoft Edge (Chromium-based) Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2024-49041.md)
  `CVE-2024-49041` · CVE record: Microsoft Microsoft Edge (Chromium-based) · CVSS 4.3 Medium · Not analysed yet · Published 6 Dec 2024 · Tags: CWE-449
- [Microsoft Edge (Chromium-based) Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2024-43577.md)
  `CVE-2024-43577` · CVE record: Microsoft Microsoft Edge (Chromium-based) · CVSS 4.3 Medium · Not analysed yet · Published 18 Oct 2024 · Tags: CWE-449
- [Microsoft Edge (Chromium-based) Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2024-38083.md)
  `CVE-2024-38083` · CVE record: Microsoft Microsoft Edge for Android and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 13 Jun 2024 · Tags: CWE-449
- [Zoom Clients - Improper Authentication](https://agentprime.io/advisories/CVE-2024-24698.md)
  `CVE-2024-24698` · CVE record: Zoom Video Communications, Inc. Zoom Clients · CVSS 4.9 Medium · Not analysed yet · Published 13 Feb 2024 · Tags: CWE-449
- [Improper access control in Zoom Mobile App for iOS and Zoom SDKs for iOS before version 5.16.5 may allow an authenticated user to conduct a disclosure of information via network access.](https://agentprime.io/advisories/CVE-2023-43585.md)
  `CVE-2023-43585` · CVE record: Zoom Video Communications, Inc. Zoom Mobile App for iOS and SDKs for iOS · CVSS 7.1 High · Not analysed yet · Published 13 Dec 2023 · Tags: CWE-449
- [Zoom Video Communications, Inc. Zoom Clients: Insufficient control flow management in some Zoom clients may allow an authenticated user…](https://agentprime.io/advisories/CVE-2023-43588.md)
  `CVE-2023-43588` · CVE record: Zoom Video Communications, Inc. Zoom Clients · CVSS 3.5 Low · Not analysed yet · Published 14 Nov 2023 · Tags: CWE-449
- [Zoom Video Communications, Inc. Zoom Clients: Improper authentication in Zoom clients may allow an authenticated user to conduct a…](https://agentprime.io/advisories/CVE-2023-39215.md)
  `CVE-2023-39215` · CVE record: Zoom Video Communications, Inc. Zoom Clients · CVSS 7.1 High · Not analysed yet · Published 12 Sept 2023 · Tags: CWE-449
- [Zoom Video Communications…: Improper input validation in Zoom Desktop Client for Windows before 5.15.5 may allow an…](https://agentprime.io/advisories/CVE-2023-39209.md)
  `CVE-2023-39209` · CVE record: Zoom Video Communications, Inc. Zoom Desktop Client for Windows · CVSS 5.9 Medium · Not analysed yet · Published 8 Aug 2023 · Tags: CWE-449
- [Zoom Video Communications, Inc. Zoom Clients: Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow…](https://agentprime.io/advisories/CVE-2023-36535.md)
  `CVE-2023-36535` · CVE record: Zoom Video Communications, Inc. Zoom Clients · CVSS 7.1 High · Not analysed yet · Published 8 Aug 2023 · Tags: CWE-449

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-449>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-449/>. Everything for agents: <https://agentprime.io/llms.txt>.