Advisories · Weakness

CWE-451.

Every Advisory and CVE whose sources give the weakness CWE-451, newest first.

CVE-2026-121045 CVE record

CVSS 5.4 Medium

Google Chrome: UI misrepresentation in Browser in Google Chrome on on Mac prior to 157.0.8103.38 allowed…
- Google Chrome
- CWE-451
Not analysed yet 3 Nov 2026
CVE-2026-121162 CVE record

CVSS 5.4 Medium

Google Chrome: UI misrepresentation in Notifications in Google Chrome on on Windows prior to…
- Google Chrome
- CWE-451
Not analysed yet 3 Nov 2026
CVE-2026-121081 CVE record

CVSS 5.9 Medium

Google Chrome: UI misrepresentation in Passwords in Google Chrome prior to 157.0.8103.38 allowed a…
- Google Chrome
- CWE-451
Not analysed yet 3 Nov 2026
CVE-2026-121121 CVE record

CVSS 5.4 Medium

Google Chrome: UI misrepresentation in PageInfo in Google Chrome prior to 157.0.8103.38 allowed a remote…
- Google Chrome
- CWE-451
Not analysed yet 3 Nov 2026
CVE-2026-121206 CVE record

CVSS 5.4 Medium

Google Chrome: UI misrepresentation in Isolated in Google Chrome prior to 157.0.8103.38 allowed a remote…
- Google Chrome
- CWE-451
Not analysed yet 3 Nov 2026
CVE-2026-121165 CVE record

CVSS 5.4 Medium

Google Chrome: UI misrepresentation in Mobile in Google Chrome on on Android prior to 157.0.8103.38…
- Google Chrome
- CWE-451
Not analysed yet 3 Nov 2026
CVE-2026-121043 CVE record

CVSS 5.4 Medium

Google Chrome: UI misrepresentation in Payments in Google Chrome prior to 157.0.8103.38 allowed a remote…
- Google Chrome
- CWE-451
Not analysed yet 3 Nov 2026
CVE-2026-121190 CVE record

Google Chrome: UI misrepresentation in Extensions in Google Chrome prior to 157.0.8103.38 allowed a…
- Google Chrome
- CWE-451
Not analysed yet 3 Nov 2026
CVE-2026-121053 CVE record

CVSS 5.4 Medium

Google Chrome: UI misrepresentation in Transactions Platform in Google Chrome on on Android prior to…
- Google Chrome
- CWE-451
Not analysed yet 3 Nov 2026
CVE-2026-121209 CVE record

Google Chrome: UI misrepresentation in Input in Google Chrome prior to 157.0.8103.38 allowed a remote…
- Google Chrome
- CWE-451
Not analysed yet 3 Nov 2026
CVE-2026-121110 CVE record

CVSS 5.4 Medium

Google Chrome: UI misrepresentation in Shopping in Google Chrome on on Android prior to 157.0.8103.38…
- Google Chrome
- CWE-451
Not analysed yet 3 Nov 2026
CVE-2026-121216 CVE record

CVSS 5.4 Medium

Google Chrome: UI misrepresentation in UI in Google Chrome prior to 157.0.8103.38 allowed a remote…
- Google Chrome
- CWE-451
Not analysed yet 3 Nov 2026
CVE-2026-121186 CVE record

CVSS 5.4 Medium

Google Chrome: UI misrepresentation in Passwords in Google Chrome on on iOS prior to 157.0.8103.38…
- Google Chrome
- CWE-451
Not analysed yet 3 Nov 2026
CVE-2026-121215 CVE record

CVSS 5.4 Medium

Google Chrome: UI misrepresentation in Bluetooth in Google Chrome prior to 157.0.8103.38 allowed a…
- Google Chrome
- CWE-451
Not analysed yet 3 Nov 2026
CVE-2026-121067 CVE record

CVSS 5.4 Medium

Google Chrome: UI misrepresentation in PermissionElement in Google Chrome prior to 157.0.8103.38 allowed…
- Google Chrome
- CWE-451
Not analysed yet 3 Nov 2026
CVE-2026-121122 CVE record

CVSS 5.4 Medium

Google Chrome: UI misrepresentation in Prompts in Google Chrome prior to 157.0.8103.38 allowed a remote…
- Google Chrome
- CWE-451
Not analysed yet 3 Nov 2026
CVE-2026-121177 CVE record

CVSS 5.4 Medium

Google Chrome: UI misrepresentation in PageInfo in Google Chrome on on iOS prior to 157.0.8103.38…
- Google Chrome
- CWE-451
Not analysed yet 3 Nov 2026
CVE-2026-121244 CVE record

CVSS 5.4 Medium

Google Chrome: UI misrepresentation in FileAPI in Google Chrome prior to 157.0.8103.38 allowed a remote…
- Google Chrome
- CWE-451
Not analysed yet 3 Nov 2026
CVE-2026-121051 CVE record

Google Chrome: UI misrepresentation in iOSWeb in Google Chrome on on iOS prior to 157.0.8103.38 allowed…
- Google Chrome
- CWE-451
Not analysed yet 3 Nov 2026
CVE-2026-59006 CVE record

CVSS 4.0 Medium

In getTouchOcclusionMode of WindowState.java, there is a possible tapjacking issue due to a tapjacking/overlay attack.
- Google Android
- CWE-451
Not analysed yet 2 Nov 2026
CVE-2026-58886 CVE record

CVSS 7.8 High

In updateInputWindows of InputMonitor.java, there is a possible tapjacking issue due to a logic error in the code.
- Google Android
- CWE-451
Not analysed yet 2 Nov 2026
CVE-2026-55287 CVE record

CVSS 8.4 High

In onCreate of GrantCredentialsPermissionActivity.java, there is a possible way to trick the user into granting account credentials due to misleading or insufficient UI.
- Google Android
- CWE-451
Not analysed yet 2 Nov 2026
CVE-2026-55263 CVE record

CVSS 8.4 High

In multiple functions of AllowBindAppWidgetActivity.java, there is a possible misunderstanding of reject/consent actions due to misleading or insufficient UI.
- Google Android
- CWE-451
Not analysed yet 2 Nov 2026
CVE-2026-55257 CVE record

CVSS 8.4 High

In UsbDialogHelper of UsbDialogHelper.java, there is a possible UI confusion due to misleading or insufficient UI.
- Google Android
- CWE-451
Not analysed yet 2 Nov 2026
CVE-2026-49923 CVE record

CVSS 8.4 High

In onResult of AccountManagerService.java, there is a possible untrusted/misleading UI issue due to a logic error in the code.
- Google Android
- CWE-451
Not analysed yet 2 Nov 2026
CVE-2025-26433 CVE record

CVSS 8.4 High

In multiple locations, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack.
- Google Android
- CWE-451
Not analysed yet 2 Nov 2026
CVE-2025-22436 CVE record

CVSS 8.4 High

In multiple locations, there is a possible way to trick a user into disclosing Autofill contents due to a tapjacking/overlay attack.
- Google Android
- CWE-451
Not analysed yet 2 Nov 2026
CVE-2026-119730 CVE record

CVSS 5.1 Medium

Maxthon Browser for Android < 7.5.8.103 Fullscreen Address Bar Spoofing
- Maxthon Technology Limited Maxthon Browser for Android
- CWE-451
Not analysed yet 30 Oct 2026
better-auth npm

CVSS 8.5 High

better-auth: Device login approval does not show the requesting client or permissions
- CWE-451
>=1.3.8-beta.3, <1.7.0-rc.3 · fixed in 1.7.0-rc.3

GHSA-q84f-53jg-9ppm · CVE-2026-109346 Not analysed yet 27 Oct 2026
CVE-2026-118027 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Frame poisoning in the Layout component
- Mozilla Firefox
- CWE-451
Not analysed yet 27 Oct 2026
CVE-2026-118018 CVE record

CVSS 8.8 High

Spoofing issue in the Downloads component in Firefox for Android
- Mozilla Firefox
- CWE-451
Not analysed yet 27 Oct 2026
CVE-2026-118011 CVE record

CVSS 8.8 High

Frame poisoning in the CSS Parsing and Computation component
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-451
Not analysed yet 27 Oct 2026
CVE-2026-117960 CVE record

CVSS 4.7 Medium

Spoofing issue in the DOM: Core & HTML component
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-451
Not analysed yet 27 Oct 2026
CVE-2026-116631 CVE record

CVSS 5.4 Medium

External protocol handler (tel:) address bar spoof
- Mozilla Firefox for iOS
- CWE-451
Not analysed yet 26 Oct 2026
CVE-2026-116632 CVE record

CVSS 5.4 Medium

Facetime protocol handler enabled spoofing
- Mozilla Firefox for iOS
- CWE-451
Not analysed yet 26 Oct 2026
CVE-2026-113088 CVE record

CVSS 8.8 High

Google Chrome: UI misrepresentation in Mobile in Google Chrome on on Android prior to 156.0.8078.47…
- Google Chrome
- CWE-451
Not analysed yet 20 Oct 2026
CVE-2026-113067 CVE record

CVSS 8.8 High

Google Chrome: UI misrepresentation in Chromoting in Google Chrome prior to 156.0.8078.47 allowed a…
- Google Chrome
- CWE-451
Not analysed yet 20 Oct 2026
CVE-2026-113046 CVE record

CVSS 8.8 High

Google Chrome: UI misrepresentation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a…
- Google Chrome
- CWE-451
Not analysed yet 20 Oct 2026
CVE-2026-113182 CVE record

CVSS 8.8 High

Google Chrome: UI misrepresentation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a…
- Google Chrome
- CWE-451
Not analysed yet 20 Oct 2026
CVE-2026-112994 CVE record

CVSS 8.8 High

Google Chrome: UI misrepresentation in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote…
- Google Chrome
- CWE-451
Not analysed yet 20 Oct 2026
CVE-2026-113169 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Google Chrome: UI misrepresentation in WebAppInstalls in Google Chrome on on Android prior to…
- Google Chrome
- CWE-451
Not analysed yet 20 Oct 2026
CVE-2026-113173 CVE record

CVSS 8.8 High

Google Chrome: UI misrepresentation in UI in Google Chrome on on Android prior to 156.0.8078.47 allowed…
- Google Chrome
- CWE-451
Not analysed yet 20 Oct 2026
CVE-2026-113156 CVE record

CVSS 8.8 High

Google Chrome: UI misrepresentation in Messages in Google Chrome on on Android prior to 156.0.8078.47…
- Google Chrome
- CWE-451
Not analysed yet 20 Oct 2026
CVE-2026-113292 CVE record

CVSS 8.8 High

Google Chrome: UI misrepresentation in Omnibox in Google Chrome on on Android prior to 156.0.8078.47…
- Google Chrome
- CWE-451
Not analysed yet 20 Oct 2026
CVE-2026-113145 CVE record

CVSS 8.8 High

Google Chrome: UI misrepresentation in Messages in Google Chrome on on Android prior to 156.0.8078.47…
- Google Chrome
- CWE-451
Not analysed yet 20 Oct 2026
CVE-2026-113080 CVE record

CVSS 8.8 High

Google Chrome: UI misrepresentation in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a…
- Google Chrome
- CWE-451
Not analysed yet 20 Oct 2026
CVE-2026-113025 CVE record

CVSS 8.8 High

Google Chrome: UI misrepresentation in Input in Google Chrome prior to 156.0.8078.47 allowed a remote…
- Google Chrome
- CWE-451
Not analysed yet 20 Oct 2026
CVE-2026-113226 CVE record

CVSS 8.8 High

Google Chrome: UI misrepresentation in Model in Google Chrome prior to 156.0.8078.47 allowed a remote…
- Google Chrome
- CWE-451
Not analysed yet 20 Oct 2026
CVE-2026-113241 CVE record

CVSS 8.8 High

Google Chrome: UI misrepresentation in Toolbar in Google Chrome on on Android prior to 156.0.8078.47…
- Google Chrome
- CWE-451
Not analysed yet 20 Oct 2026
CVE-2026-113291 CVE record

CVSS 8.8 High

Google Chrome: UI misrepresentation in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a…
- Google Chrome
- CWE-451
Not analysed yet 20 Oct 2026
CVE-2026-113323 CVE record

CVSS 8.8 High

Google Chrome: UI misrepresentation in Chrome for iOS in Google Chrome on on iOS prior to 156.0.8078.47…
- Google Chrome
- CWE-451
Not analysed yet 20 Oct 2026
CVE-2026-113312 CVE record

CVSS 8.8 High

Google Chrome: UI misrepresentation in Autofill in Google Chrome on on Mac prior to 156.0.8078.47…
- Google Chrome
- CWE-451
Not analysed yet 20 Oct 2026
CVE-2026-113096 CVE record

CVSS 8.8 High

Google Chrome: UI misrepresentation in Text in Google Chrome on on Android prior to 156.0.8078.47…
- Google Chrome
- CWE-451
Not analysed yet 20 Oct 2026
CVE-2026-113297 CVE record

CVSS 6.5 Medium

Google Chrome: UI misrepresentation in Ozone in Google Chrome prior to 156.0.8078.47 allowed a remote…
- Google Chrome
- CWE-451
Not analysed yet 20 Oct 2026
CVE-2026-113170 CVE record

CVSS 8.8 High

Google Chrome: UI misrepresentation in Autofill in Google Chrome on on Android prior to 156.0.8078.47…
- Google Chrome
- CWE-451
Not analysed yet 20 Oct 2026
CVE-2026-113199 CVE record

CVSS 6.5 Medium

Google Chrome: UI misrepresentation in Payments in Google Chrome prior to 156.0.8078.47 allowed a remote…
- Google Chrome
- CWE-451
Not analysed yet 20 Oct 2026
CVE-2026-113138 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Google Chrome: UI misrepresentation in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a…
- Google Chrome
- CWE-451
Not analysed yet 20 Oct 2026
CVE-2026-113090 CVE record

CVSS 8.8 High

Google Chrome: UI misrepresentation in Interstitials in Google Chrome prior to 156.0.8078.47 allowed a…
- Google Chrome
- CWE-451
Not analysed yet 20 Oct 2026
CVE-2026-113230 CVE record

CVSS 8.8 High

Google Chrome: UI misrepresentation in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote…
- Google Chrome
- CWE-451
Not analysed yet 20 Oct 2026
CVE-2026-113204 CVE record

CVSS 8.8 High

Google Chrome: UI misrepresentation in TrustedWebActivities in Google Chrome on on Android prior to…
- Google Chrome
- CWE-451
Not analysed yet 20 Oct 2026