Advisories · Weakness

CWE-451.

Every Advisory and CVE whose sources give the weakness CWE-451, newest first.

CVE-2026-13992 CVE record

CVSS 4.2 Medium

Google Chrome: Inappropriate implementation in UI in Google Chrome on Mac prior to 150.0.7871.47 allowed…
- Google Chrome
- CWE-451
Not analysed yet 30 Jun 2026
CVE-2026-13989 CVE record

CVSS 6.5 Medium

Google Chrome: Inappropriate implementation in PageInfo in Google Chrome prior to 150.0.7871.47 allowed…
- Google Chrome
- CWE-451
Not analysed yet 30 Jun 2026
CVE-2026-13988 CVE record

CVSS 6.5 Medium

Google Chrome: Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a…
- Google Chrome
- CWE-451
Not analysed yet 30 Jun 2026
CVE-2026-13987 CVE record

CVSS 4.3 Medium

Google Chrome: Incorrect security UI in Mobile in Google Chrome on Android prior to 150.0.7871.47…
- Google Chrome
- CWE-451
Not analysed yet 30 Jun 2026
CVE-2026-13986 CVE record

CVSS 4.2 Medium

Google Chrome: Inappropriate implementation in Media UI in Google Chrome on ChromeOS prior to…
- Google Chrome
- CWE-451
Not analysed yet 30 Jun 2026
CVE-2026-13985 CVE record

CVSS 6.5 Medium

Google Chrome: Inappropriate implementation in MediaCapture in Google Chrome prior to 150.0.7871.47…
- Google Chrome
- CWE-451
Not analysed yet 30 Jun 2026
CVE-2026-13984 CVE record

CVSS 4.3 Medium

Google Chrome: Incorrect security UI in TabStrip in Google Chrome prior to 150.0.7871.47 allowed a…
- Google Chrome
- CWE-451
Not analysed yet 30 Jun 2026
CVE-2026-13983 CVE record

CVSS 4.2 Medium

Google Chrome: Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to…
- Google Chrome
- CWE-451
Not analysed yet 30 Jun 2026
CVE-2026-13982 CVE record

CVSS 3.1 Low

Google Chrome: Incorrect security UI in Passwords in Google Chrome prior to 150.0.7871.47 allowed a…
- Google Chrome
- CWE-451
Not analysed yet 30 Jun 2026
CVE-2026-13981 CVE record

CVSS 4.3 Medium

Google Chrome: Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to…
- Google Chrome
- CWE-451
Not analysed yet 30 Jun 2026
CVE-2026-13980 CVE record

CVSS 4.3 Medium

Google Chrome: Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to…
- Google Chrome
- CWE-451
Not analysed yet 30 Jun 2026
CVE-2026-13979 CVE record

CVSS 4.3 Medium

Google Chrome: Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a…
- Google Chrome
- CWE-451
Not analysed yet 30 Jun 2026
CVE-2026-13978 CVE record

CVSS 4.3 Medium

Google Chrome: Insufficient policy enforcement in PageInfo in Google Chrome prior to 150.0.7871.47…
- Google Chrome
- CWE-451
Not analysed yet 30 Jun 2026
CVE-2026-13973 CVE record

CVSS 4.2 Medium

Google Chrome: Inappropriate implementation in UI in Google Chrome prior to 150.0.7871.47 allowed a…
- Google Chrome
- CWE-451
Not analysed yet 30 Jun 2026
CVE-2026-13972 CVE record

CVSS 4.3 Medium

Google Chrome: Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a…
- Google Chrome
- CWE-451
Not analysed yet 30 Jun 2026
CVE-2026-13966 CVE record

CVSS 4.3 Medium

Google Chrome: Inappropriate implementation in History in Google Chrome prior to 150.0.7871.47 allowed a…
- Google Chrome
- CWE-451
Not analysed yet 30 Jun 2026
CVE-2026-13960 CVE record

CVSS 4.3 Medium

Google Chrome: Inappropriate implementation in Passwords in Google Chrome prior to 150.0.7871.47 allowed…
- Google Chrome
- CWE-451
Not analysed yet 30 Jun 2026
CVE-2026-13956 CVE record

CVSS 4.2 Medium

Google Chrome: Incorrect security UI in PageInfo in Google Chrome prior to 150.0.7871.47 allowed a…
- Google Chrome
- CWE-451
Not analysed yet 30 Jun 2026
CVE-2026-13948 CVE record

CVSS 3.1 Low

Google Chrome: Insufficient policy enforcement in Extensions in Google Chrome prior to 150.0.7871.47…
- Google Chrome
- CWE-451
Not analysed yet 30 Jun 2026
CVE-2026-13945 CVE record

CVSS 3.1 Low

Google Chrome: Insufficient policy enforcement in Extensions in Google Chrome on Linux prior to…
- Google Chrome
- CWE-451
Not analysed yet 30 Jun 2026
CVE-2026-13941 CVE record

CVSS 4.3 Medium

Google Chrome: Inappropriate implementation in SiteSettings in Google Chrome on Android prior to…
- Google Chrome
- CWE-451
Not analysed yet 30 Jun 2026
CVE-2026-13916 CVE record

CVSS 4.3 Medium

Google Chrome: Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to…
- Google Chrome
- CWE-451
Not analysed yet 30 Jun 2026
CVE-2026-13912 CVE record

CVSS 4.3 Medium

Google Chrome: Inappropriate implementation in Safe Browsing in Google Chrome on iOS prior to…
- Google Chrome
- CWE-451
Not analysed yet 30 Jun 2026
CVE-2026-13907 CVE record

CVSS 4.2 Medium

Google Chrome: Inappropriate implementation in iOSWeb in Google Chrome on iOS prior to 150.0.7871.47…
- Google Chrome
- CWE-451
Not analysed yet 30 Jun 2026
CVE-2026-13902 CVE record

CVSS 4.3 Medium

Google Chrome: Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to…
- Google Chrome
- CWE-451
Not analysed yet 30 Jun 2026
CVE-2026-13895 CVE record

CVSS 4.2 Medium

Google Chrome: Inappropriate implementation in Autofill in Google Chrome prior to 150.0.7871.47 allowed…
- Google Chrome
- CWE-451
Not analysed yet 30 Jun 2026
CVE-2026-13892 CVE record

CVSS 6.5 Medium

Google Chrome: Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to…
- Google Chrome
- CWE-451
Not analysed yet 30 Jun 2026
CVE-2026-13867 CVE record

CVSS 4.3 Medium

Google Chrome: Inappropriate implementation in Geolocation in Google Chrome prior to 150.0.7871.47…
- Google Chrome
- CWE-451
Not analysed yet 30 Jun 2026
CVE-2026-13860 CVE record

CVSS 4.2 Medium

Google Chrome: Incorrect security UI in Autofill in Google Chrome on Windows prior to 150.0.7871.47…
- Google Chrome
- CWE-451
Not analysed yet 30 Jun 2026
CVE-2026-13857 CVE record

CVSS 4.2 Medium

Google Chrome: Inappropriate implementation in Geometry in Google Chrome prior to 150.0.7871.47 allowed…
- Google Chrome
- CWE-451
Not analysed yet 30 Jun 2026
CVE-2026-13842 CVE record

CVSS 4.3 Medium

Google Chrome: Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to…
- Google Chrome
- CWE-451
Not analysed yet 30 Jun 2026
CVE-2026-13837 CVE record

CVSS 4.3 Medium

Google Chrome: Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a…
- Google Chrome
- CWE-451
Not analysed yet 30 Jun 2026
CVE-2026-9106 CVE record

CVSS 4.8 Medium

UI misrepresentation vulnerability in GitHub Enterprise Server allowed unauthorized organization runner management via undisclosed OAuth scope on consent screen
- GitHub Enterprise Server
- CWE-451
Not analysed yet 30 Jun 2026
CVE-2026-12458 CVE record

CVSS 3.1 Low

Google Chrome: Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.155…
- Google Chrome
- CWE-451
Not analysed yet 17 Jun 2026
symfony/html-sanitizer +1 Packagist

CVSS 5.3 Medium

Symfony: HtmlSanitizer URL Parser Deny Gates Underinclusive: Percent-Encoded BiDi Marks and Unicode Whitespace Bypass Visual-Spoofing Defense
- CWE-451
- CWE-1007
>=6.1.0, <6.4.41 || >=7.0.0, <7.4.13 || >=8.0.0, <8.0.13 · fixed in 6.4.41, 7.4.13, 8.0.13

GHSA-v3wm-qf9p-c549 · CVE-2026-48760 Not analysed yet 15 Jun 2026
CVE-2026-45650 CVE record

CVSS 4.3 Medium

Microsoft Bing Search Spoofing Vulnerability
- Microsoft Bing Search for Android
- CWE-451
Not analysed yet 9 Jun 2026
CVE-2026-11300 CVE record

CVSS 4.3 Medium

Google Chrome: Inappropriate implementation in Permissions in Google Chrome prior to 149.0.7827.53…
- Google Chrome
- CWE-451
Not analysed yet 4 Jun 2026
CVE-2026-11294 CVE record

CVSS 4.3 Medium

Google Chrome: Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.53 allowed…
- Google Chrome
- CWE-451
Not analysed yet 4 Jun 2026
CVE-2026-11286 CVE record

CVSS 4.3 Medium

Improper input validation in Google Chrome
- Google Chrome
- CWE-20
- CWE-451
Not analysed yet 4 Jun 2026
CVE-2026-11285 CVE record

CVSS 4.3 Medium

Google Chrome: Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to…
- Google Chrome
- CWE-451
Not analysed yet 4 Jun 2026
CVE-2026-11254 CVE record

CVSS 4.3 Medium

Google Chrome: Inappropriate implementation in Permissions in Google Chrome prior to 149.0.7827.53…
- Google Chrome
- CWE-451
Not analysed yet 4 Jun 2026
CVE-2026-11245 CVE record

CVSS 4.3 Medium

Google Chrome: Inappropriate implementation in Payments in Google Chrome prior to 149.0.7827.53 allowed…
- Google Chrome
- CWE-451
Not analysed yet 4 Jun 2026
CVE-2026-11232 CVE record

CVSS 5.4 Medium

Google Chrome: Inappropriate implementation in TabGroups in Google Chrome prior to 149.0.7827.53 allowed…
- Google Chrome
- CWE-451
Not analysed yet 4 Jun 2026
CVE-2026-11228 CVE record

CVSS 4.3 Medium

Google Chrome: Inappropriate implementation in File Input in Google Chrome prior to 149.0.7827.53…
- Google Chrome
- CWE-451
Not analysed yet 4 Jun 2026
CVE-2026-11227 CVE record

CVSS 6.5 Medium

Google Chrome: Incorrect security UI in Tab Hover Cards in Google Chrome prior to 149.0.7827.53 allowed…
- Google Chrome
- CWE-451
Not analysed yet 4 Jun 2026
CVE-2026-11225 CVE record

CVSS 6.5 Medium

Google Chrome: Inappropriate implementation in WebUI in Google Chrome prior to 149.0.7827.53 allowed a…
- Google Chrome
- CWE-451
Not analysed yet 4 Jun 2026
CVE-2026-11222 CVE record

CVSS 6.5 Medium

Google Chrome: Incorrect security UI in Tab Strip in Google Chrome prior to 149.0.7827.53 allowed a…
- Google Chrome
- CWE-451
Not analysed yet 4 Jun 2026
CVE-2026-11216 CVE record

CVSS 4.3 Medium

Google Chrome: Incorrect security UI in File Input in Google Chrome prior to 149.0.7827.53 allowed a…
- Google Chrome
- CWE-451
Not analysed yet 4 Jun 2026
CVE-2026-11215 CVE record

CVSS 6.5 Medium

Google Chrome: Inappropriate implementation in Cronet in Google Chrome on Android prior to 149.0.7827.53…
- Google Chrome
- CWE-451
Not analysed yet 4 Jun 2026
CVE-2026-11175 CVE record

CVSS 8.8 High

Google Chrome: Incorrect security UI in Messages in Google Chrome on Android prior to 149.0.7827.53…
- Google Chrome
- CWE-451
Not analysed yet 4 Jun 2026
CVE-2026-11172 CVE record

CVSS 8.8 High

Google Chrome: Incorrect security UI in Contact Picker in Google Chrome on Android prior to…
- Google Chrome
- CWE-451
Not analysed yet 4 Jun 2026
CVE-2026-11107 CVE record

CVSS 4.3 Medium

Google Chrome: Inappropriate implementation in Downloads in Google Chrome prior to 149.0.7827.53 allowed…
- Google Chrome
- CWE-451
Not analysed yet 4 Jun 2026
CVE-2026-11019 CVE record

CVSS 6.5 Medium

Authentication bypass by spoofing in Google Chrome
- Google Chrome
- Authentication bypass
- CWE-451
Not analysed yet 4 Jun 2026
CVE-2026-11001 CVE record

CVSS 4.2 Medium

Google Chrome: Inappropriate implementation in Payments in Google Chrome prior to 149.0.7827.53 allowed…
- Google Chrome
- CWE-451
Not analysed yet 4 Jun 2026
CVE-2026-10984 CVE record

CVSS 5.4 Medium

Google Chrome: Inappropriate implementation in Accessibility in Google Chrome on Android prior to…
- Google Chrome
- CWE-451
Not analysed yet 4 Jun 2026
CVE-2019-25718 CVE record

CVSS 8.6 High

Dräger Infinity Explorer C700 Privilege Escalation via Kiosk Mode Bypass
- Dräger Infinity Explorer C700
- CWE-451
Not analysed yet 1 Jun 2026
CVE-2026-0096 CVE record

CVSS 7.8 High

In getAppLabel of ForgetDeviceDialogFragment.java, there is a possible trick the user into forgetting a device due to misleading or insufficient UI.
- Google Android
- CWE-451
Not analysed yet 1 Jun 2026
CVE-2026-0094 CVE record

CVSS 7.8 High

In getApplicationLabel of KeyChainActivity.java, there is a possible way to trick the user into approving access to certificates due to misleading or insufficient UI.
- Google Android
- CWE-451
Not analysed yet 1 Jun 2026
CVE-2026-0093 CVE record

CVSS 7.8 High

In multiple locations, there is a possible misleading UI due to obfuscation.
- Google Android
- CWE-451
Not analysed yet 1 Jun 2026
CVE-2026-0088 CVE record

CVSS 7.8 High

In getCallingAppLabel of CertInstaller.java, there is a possible way to hide a sensitive security dialogue due to misleading or insufficient UI.
- Google Android
- CWE-451
Not analysed yet 1 Jun 2026