# CWE-451. Every Advisory and CVE whose sources give the weakness CWE-451, newest first. ## Records, newest first (an older page) - [Microsoft Exchange Server Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-21527.md) `CVE-2026-21527` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Feb 2026 · Tags: CWE-345, CWE-451, CWE-1286 - [Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-0391.md) `CVE-2026-0391` · CVE record: Microsoft Microsoft Edge (Chromium-based) · CVSS 6.5 Medium · Not analysed yet · Published 5 Feb 2026 · Tags: CWE-451 - [BIG-IP Configuration utility vulnerability](https://agentprime.io/advisories/CVE-2026-20732.md) `CVE-2026-20732` · CVE record: F5 BIG-IP · CVSS 2.3 Low · Not analysed yet · Published 4 Feb 2026 · Tags: CWE-451 - [Google Chrome: Incorrect security UI in Split View in Google Chrome prior to 144.0.7559.59 allowed a…](https://agentprime.io/advisories/CVE-2026-0907.md) `CVE-2026-0907` · CVE record: Google Chrome · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Jan 2026 · Tags: CWE-451 - [Google Chrome: Incorrect security UI in Google Chrome on Android prior to 144.0.7559.59 allowed a remote…](https://agentprime.io/advisories/CVE-2026-0906.md) `CVE-2026-0906` · CVE record: Google Chrome · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Jan 2026 · Tags: CWE-451 - [Google Chrome: Incorrect security UI in Digital Credentials in Google Chrome prior to 144.0.7559.59…](https://agentprime.io/advisories/CVE-2026-0904.md) `CVE-2026-0904` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 20 Jan 2026 · Tags: CWE-451 - [Google Chrome: Inappropriate implementation in Blink in Google Chrome on Android prior to 144.0.7559.59…](https://agentprime.io/advisories/CVE-2026-0901.md) `CVE-2026-0901` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 20 Jan 2026 · Tags: CWE-451 - [Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2025-62224.md) `CVE-2025-62224` · CVE record: Microsoft Microsoft Edge for Android · CVSS 5.5 Medium · Not analysed yet · Published 7 Jan 2026 · Tags: CWE-451 - [Microsoft Edge (Chromium-based) Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2025-65046.md) `CVE-2025-65046` · CVE record: Microsoft Microsoft Edge for Android · CVSS 3.1 Low · Not analysed yet · Published 18 Dec 2025 · Tags: Authentication bypass, CWE-451 - [Filename spoofing via Unicode Right-to-Left Override in Firefox for iOS](https://agentprime.io/advisories/CVE-2025-14744.md) `CVE-2025-14744` · CVE record: Mozilla Firefox for iOS · CVSS 6.5 Medium · Not analysed yet · Published 18 Dec 2025 · Tags: CWE-451 - [LINE Corporation LINE client for iOS: LINE client for iOS prior to 15.19 allows UI spoofing due to inconsistencies between the…](https://agentprime.io/advisories/CVE-2025-14023.md) `CVE-2025-14023` · CVE record: LINE Corporation LINE client for iOS · CVSS 3.1 Low · Not analysed yet · Published 15 Dec 2025 · Tags: CWE-451 - [LINE Corporation LINE client for iOS: The in-app browser in LINE client for iOS versions prior to 14.14 is vulnerable to…](https://agentprime.io/advisories/CVE-2025-14021.md) `CVE-2025-14021` · CVE record: LINE Corporation LINE client for iOS · CVSS 4.3 Medium · Not analysed yet · Published 15 Dec 2025 · Tags: CWE-451 - [LINE Corporation LINE client for Android: LINE client for Android versions prior to 14.20 contains a UI spoofing vulnerability in…](https://agentprime.io/advisories/CVE-2025-14020.md) `CVE-2025-14020` · CVE record: LINE Corporation LINE client for Android · CVSS 5.4 Medium · Not analysed yet · Published 15 Dec 2025 · Tags: CWE-451 - [LINE Corporation LINE client for Android: LINE client for Android versions from 13.8 to 15.5 is vulnerable to UI spoofing in the…](https://agentprime.io/advisories/CVE-2025-14019.md) `CVE-2025-14019` · CVE record: LINE Corporation LINE client for Android · CVSS 3.4 Low · Not analysed yet · Published 15 Dec 2025 · Tags: CWE-451 - [An inconsistent user interface issue was addressed with improved state management.](https://agentprime.io/advisories/CVE-2025-46287.md) `CVE-2025-46287` · CVE record: Apple iOS and iPadOS and 3 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Dec 2025 · Tags: CWE-451 - [Microsoft Exchange Server Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2025-64667.md) `CVE-2025-64667` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 5.3 Medium · Not analysed yet · Published 9 Dec 2025 · Tags: CWE-451 - [Microsoft Edge (Chromium-based) for Mac Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2025-62223.md) `CVE-2025-62223` · CVE record: Microsoft Microsoft Edge (Chromium-based) · CVSS 4.3 Medium · Not analysed yet · Published 5 Dec 2025 · Tags: CWE-451 - [Apple Safari: A spoofing issue was addressed with improved truncation when displaying the fully…](https://agentprime.io/advisories/CVE-2025-31266.md) `CVE-2025-31266` · CVE record: Apple Safari and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 21 Nov 2025 · Tags: CWE-451 - [Google Chrome: Inappropriate implementation in Compositing in Google Chrome prior to 140.0.7339.80…](https://agentprime.io/advisories/CVE-2025-13107.md) `CVE-2025-13107` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 14 Nov 2025 · Tags: CWE-451 - [Google Chrome: Inappropriate implementation in Autofill in Google Chrome on Windows prior to…](https://agentprime.io/advisories/CVE-2024-7021.md) `CVE-2024-7021` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 14 Nov 2025 · Tags: CWE-451 - [Google Chrome: Inappropriate implementation in Fullscreen in Google Chrome prior to 128.0.6613.84…](https://agentprime.io/advisories/CVE-2024-13178.md) `CVE-2024-13178` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 14 Nov 2025 · Tags: CWE-451 - [Google Chrome: Inappropriate implementation in WebApp Installs in Google Chrome on Android prior to…](https://agentprime.io/advisories/CVE-2025-13102.md) `CVE-2025-13102` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 14 Nov 2025 · Tags: CWE-451 - [Google Chrome: Inappropriate implementation in Intents in Google Chrome on Android prior to…](https://agentprime.io/advisories/CVE-2024-11919.md) `CVE-2024-11919` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 14 Nov 2025 · Tags: CWE-451 - [By generating and tricking a user into visiting a malicious URL, an attacker can perform site defacement.](https://agentprime.io/advisories/GHSA-h89p-5896-f4q8.md) `GHSA-h89p-5896-f4q8`, `BIT-drupal-2025-13082`, `CVE-2025-13082`, `DRUPAL-CORE-2025-007`, `PKSA-dh1f-zjm5-qg8y` · Packagist `drupal/core`: affected `>=8.0.0, <10.4.9 || >=10.5.0, <10.5.6 || >=11.0.0, <11.1.9 || >=11.2.0, <11.2.8`, fixed in `10.4.9`, `10.5.6`, `11.1.9`, `11.2.8` · CVSS 4.3 Medium · Not analysed yet · Published 12 Nov 2025 · Tags: CWE-451 - [Google Chrome: Inappropriate implementation in Omnibox in Google Chrome on Android prior to…](https://agentprime.io/advisories/CVE-2025-12729.md) `CVE-2025-12729` · CVE record: Google Chrome · CVSS 4.2 Medium · Not analysed yet · Published 10 Nov 2025 · Tags: CWE-451 - [Google Chrome: Inappropriate implementation in Omnibox in Google Chrome on Android prior to…](https://agentprime.io/advisories/CVE-2025-12728.md) `CVE-2025-12728` · CVE record: Google Chrome · CVSS 4.2 Medium · Not analysed yet · Published 10 Nov 2025 · Tags: CWE-451 - [Google Chrome: Incorrect security UI in SplitView in Google Chrome prior to 142.0.7444.59 allowed a…](https://agentprime.io/advisories/CVE-2025-12446.md) `CVE-2025-12446` · CVE record: Google Chrome · CVSS 4.2 Medium · Not analysed yet · Published 10 Nov 2025 · Tags: CWE-451 - [Improper authorization in Google Chrome](https://agentprime.io/advisories/CVE-2025-12435.md) `CVE-2025-12435` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 10 Nov 2025 · Tags: Broken access control, CWE-451 - [Google Chrome: Inappropriate implementation in Permissions in Google Chrome prior to 140.0.7339.80…](https://agentprime.io/advisories/CVE-2025-12911.md) `CVE-2025-12911` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 7 Nov 2025 · Tags: CWE-451 - [Google Chrome: Inappropriate implementation in Omnibox in Google Chrome on Android prior to…](https://agentprime.io/advisories/CVE-2025-11213.md) `CVE-2025-11213` · CVE record: Google Chrome · CVSS 6.3 Medium · Not analysed yet · Published 6 Nov 2025 · Tags: CWE-451 - [Google Chrome: Inappropriate implementation in Media in Google Chrome on Windows prior to 141.0.7390.54…](https://agentprime.io/advisories/CVE-2025-11212.md) `CVE-2025-11212` · CVE record: Google Chrome · CVSS 6.3 Medium · Not analysed yet · Published 6 Nov 2025 · Tags: CWE-451 - [Google Chrome: Inappropriate implementation in Media in Google Chrome prior to 141.0.7390.54 allowed a…](https://agentprime.io/advisories/CVE-2025-11208.md) `CVE-2025-11208` · CVE record: Google Chrome · CVSS 6.3 Medium · Not analysed yet · Published 6 Nov 2025 · Tags: CWE-451 - [Spoofing risk in Android custom tabs](https://agentprime.io/advisories/CVE-2025-11720.md) `CVE-2025-11720` · CVE record: Mozilla Firefox · CVSS 8.1 High · Not analysed yet · Published 14 Oct 2025 · Tags: CWE-451 - [Address bar could be spoofed on Android using visibilitychange](https://agentprime.io/advisories/CVE-2025-11718.md) `CVE-2025-11718` · CVE record: Mozilla Firefox · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2025 · Tags: CWE-451 - [WSO2 Identity Server Apps allows content spoofing in logs](https://agentprime.io/advisories/GHSA-r6f3-55wj-g9p3.md) `GHSA-r6f3-55wj-g9p3`, `CVE-2024-6429` · Maven `org.wso2.identity.apps:authentication-portal`: affected `<2.4.4`, fixed in `2.4.4` · CVSS 4.3 Medium · Not analysed yet · Published 23 Sept 2025 · Tags: CWE-451 - [Opening links via the contextual menu in Focus for iOS would not update the toolbar UI correctly, allowing attackers to spoof websites](https://agentprime.io/advisories/CVE-2025-10290.md) `CVE-2025-10290` · CVE record: Mozilla Focus for iOS · CVSS 6.5 Medium · Not analysed yet · Published 16 Sept 2025 · Tags: CWE-451 - [The issue was addressed by adding additional logic.](https://agentprime.io/advisories/CVE-2025-43327.md) `CVE-2025-43327` · CVE record: Apple Safari and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 15 Sept 2025 · Tags: CWE-451 - [Google Chrome: Inappropriate implementation in Downloads in Google Chrome on Android prior to…](https://agentprime.io/advisories/CVE-2025-9867.md) `CVE-2025-9867` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 3 Sept 2025 · Tags: CWE-451 - [Google Chrome: Inappropriate implementation in Toolbar in Google Chrome on Android prior to…](https://agentprime.io/advisories/CVE-2025-9865.md) `CVE-2025-9865` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 3 Sept 2025 · Tags: CWE-451 - [Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-9491.md) `CVE-2025-9491` · CVE record: Microsoft Windows · CVSS 7.0 High · Critical (CVSS 7+ and EPSS) · EPSS 0.76 · Not analysed yet · Published 26 Aug 2025 · Tags: CWE-451 - [Address bar spoofing using an blob URI on Firefox for Android](https://agentprime.io/advisories/CVE-2025-8364.md) `CVE-2025-8364` · CVE record: Mozilla Firefox · CVSS 4.3 Medium · Not analysed yet · Published 19 Aug 2025 · Tags: CWE-451 - [Incorrect URL truncation in Firefox for Android](https://agentprime.io/advisories/CVE-2025-8041.md) `CVE-2025-8041` · CVE record: Mozilla Firefox · CVSS 5.3 Medium · Not analysed yet · Published 19 Aug 2025 · Tags: CWE-451 - [Spoofing issue in the Address Bar component](https://agentprime.io/advisories/CVE-2025-9183.md) `CVE-2025-9183` · CVE record: Mozilla Firefox · CVSS 6.5 Medium · Not analysed yet · Published 19 Aug 2025 · Tags: CWE-451 - [Spoofing issue in the Address Bar component of Firefox Focus for Android](https://agentprime.io/advisories/CVE-2025-9186.md) `CVE-2025-9186` · CVE record: Mozilla Firefox · CVSS 6.5 Medium · Not analysed yet · Published 19 Aug 2025 · Tags: CWE-451 - [Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2025-49755.md) `CVE-2025-49755` · CVE record: Microsoft Microsoft Edge for Android · CVSS 4.3 Medium · Not analysed yet · Published 12 Aug 2025 · Tags: CWE-451 - [Google Chrome: Inappropriate implementation in Permissions in Google Chrome prior to 139.0.7258.66…](https://agentprime.io/advisories/CVE-2025-8583.md) `CVE-2025-8583` · CVE record: Google Chrome · CVSS 4.3 Medium · Not analysed yet · Published 7 Aug 2025 · Tags: CWE-451 - [The issue was addressed with improved UI.](https://agentprime.io/advisories/CVE-2025-43228.md) `CVE-2025-43228` · CVE record: Apple Safari and 1 more · CVSS 4.3 Medium · Not analysed yet · Published 29 Jul 2025 · Tags: CWE-451 - [Withdrawn Advisory: JHipster allows privilege escalation via a modified authorities parameter](https://agentprime.io/advisories/GHSA-cmm8-gw4m-26cw.md) `GHSA-cmm8-gw4m-26cw`, `CVE-2025-43712` · npm `generator-jhipster`: affected `<8.9.0`, fixed in `8.9.0` · CVSS 2.9 Low · Withdrawn · Not analysed yet · Published 25 Jul 2025 · Tags: Broken access control, CWE-451 - [Incorrect URL truncation](https://agentprime.io/advisories/CVE-2025-8043.md) `CVE-2025-8043` · CVE record: Mozilla Firefox · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Jul 2025 · Tags: CWE-451 - [Microsoft Edge (Chromium-based) Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2025-47963.md) `CVE-2025-47963` · CVE record: Microsoft Microsoft Edge (Chromium-based) · CVSS 6.3 Medium · Not analysed yet · Published 11 Jul 2025 · Tags: CWE-451 - [Microsoft Edge (Chromium-based) Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2025-47964.md) `CVE-2025-47964` · CVE record: Microsoft Microsoft Edge (Chromium-based) · CVSS 5.4 Medium · Not analysed yet · Published 11 Jul 2025 · Tags: CWE-451 - [OpenAI Operator - API Spoofing through Locking Operator on FullScreen](https://agentprime.io/advisories/CVE-2025-7021.md) `CVE-2025-7021` · CVE record: OpenAI Operator · CVSS 6.9 Medium · Not analysed yet · Published 10 Jul 2025 · Tags: CWE-451 - [IBM Datacap clickjacking](https://agentprime.io/advisories/CVE-2024-39730.md) `CVE-2024-39730` · CVE record: IBM Datacap · CVSS 5.4 Medium · Not analysed yet · Published 28 Jun 2025 · Tags: CWE-451 - [Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links](https://agentprime.io/advisories/CVE-2025-5986.md) `CVE-2025-5986` · CVE record: Mozilla Thunderbird · CVSS 6.5 Medium · Not analysed yet · Published 11 Jun 2025 · Tags: CWE-451 - [Google Chrome: Inappropriate implementation in Messages in Google Chrome on Android prior to…](https://agentprime.io/advisories/CVE-2025-5066.md) `CVE-2025-5066` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 27 May 2025 · Tags: CWE-451 - [Google Chrome: Inappropriate implementation in FileSystemAccess API in Google Chrome prior to…](https://agentprime.io/advisories/CVE-2025-5065.md) `CVE-2025-5065` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 27 May 2025 · Tags: CWE-451 - [User Interface (UI) Misrepresentation of Critical Information in GitLab](https://agentprime.io/advisories/CVE-2024-9163.md) `CVE-2024-9163` · CVE record: GitLab GitLab · CVSS 3.5 Low · Not analysed yet · Published 23 May 2025 · Tags: CWE-451 - [Microsoft Edge (Chromium-based) Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2025-29825.md) `CVE-2025-29825` · CVE record: Microsoft Microsoft Edge (Chromium-based) · CVSS 6.5 Medium · Not analysed yet · Published 2 May 2025 · Tags: CWE-451 - [Firefox Focus elide URL allows address bar spoofing](https://agentprime.io/advisories/CVE-2025-3859.md) `CVE-2025-3859` · CVE record: Mozilla Focus · CVSS 4.3 Medium · Not analysed yet · Published 30 Apr 2025 · Tags: CWE-451 - [Specially crafted filename could be used to obscure download type](https://agentprime.io/advisories/CVE-2025-4086.md) `CVE-2025-4086` · CVE record: Mozilla Firefox and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 29 Apr 2025 · Tags: CWE-451 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .