Advisories · Weakness

CWE-451.

Every Advisory and CVE whose sources give the weakness CWE-451, newest first.

CVE-2026-21527 CVE record

CVSS 6.5 Medium

Microsoft Exchange Server Spoofing Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 23
- Microsoft Exchange Server 2019 Cumulative Update 14
- CWE-345
- CWE-451
Not analysed yet 10 Feb 2026
CVE-2026-0391 CVE record

CVSS 6.5 Medium

Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
- Microsoft Edge (Chromium-based)
- CWE-451
Not analysed yet 5 Feb 2026
CVE-2026-20732 CVE record

CVSS 2.3 Low

BIG-IP Configuration utility vulnerability
- F5 BIG-IP
- CWE-451
Not analysed yet 4 Feb 2026
CVE-2026-0907 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Google Chrome: Incorrect security UI in Split View in Google Chrome prior to 144.0.7559.59 allowed a…
- Google Chrome
- CWE-451
Not analysed yet 20 Jan 2026
CVE-2026-0906 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Google Chrome: Incorrect security UI in Google Chrome on Android prior to 144.0.7559.59 allowed a remote…
- Google Chrome
- CWE-451
Not analysed yet 20 Jan 2026
CVE-2026-0904 CVE record

CVSS 5.4 Medium

Google Chrome: Incorrect security UI in Digital Credentials in Google Chrome prior to 144.0.7559.59…
- Google Chrome
- CWE-451
Not analysed yet 20 Jan 2026
CVE-2026-0901 CVE record

CVSS 5.4 Medium

Google Chrome: Inappropriate implementation in Blink in Google Chrome on Android prior to 144.0.7559.59…
- Google Chrome
- CWE-451
Not analysed yet 20 Jan 2026
CVE-2025-62224 CVE record

CVSS 5.5 Medium

Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
- Microsoft Edge for Android
- CWE-451
Not analysed yet 7 Jan 2026
CVE-2025-65046 CVE record

CVSS 3.1 Low

Microsoft Edge (Chromium-based) Spoofing Vulnerability
- Microsoft Edge for Android
- Authentication bypass
- CWE-451
Not analysed yet 18 Dec 2025
CVE-2025-14744 CVE record

CVSS 6.5 Medium

Filename spoofing via Unicode Right-to-Left Override in Firefox for iOS
- Mozilla Firefox for iOS
- CWE-451
Not analysed yet 18 Dec 2025
CVE-2025-14023 CVE record

CVSS 3.1 Low

LINE Corporation LINE client for iOS: LINE client for iOS prior to 15.19 allows UI spoofing due to inconsistencies between the…
- LINE Corporation LINE client for iOS
- CWE-451
Not analysed yet 15 Dec 2025
CVE-2025-14021 CVE record

CVSS 4.3 Medium

LINE Corporation LINE client for iOS: The in-app browser in LINE client for iOS versions prior to 14.14 is vulnerable to…
- LINE Corporation LINE client for iOS
- CWE-451
Not analysed yet 15 Dec 2025
CVE-2025-14020 CVE record

CVSS 5.4 Medium

LINE Corporation LINE client for Android: LINE client for Android versions prior to 14.20 contains a UI spoofing vulnerability in…
- LINE Corporation LINE client for Android
- CWE-451
Not analysed yet 15 Dec 2025
CVE-2025-14019 CVE record

CVSS 3.4 Low

LINE Corporation LINE client for Android: LINE client for Android versions from 13.8 to 15.5 is vulnerable to UI spoofing in the…
- LINE Corporation LINE client for Android
- CWE-451
Not analysed yet 15 Dec 2025
CVE-2025-46287 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

An inconsistent user interface issue was addressed with improved state management.
- Apple iOS and iPadOS
- Apple macOS
- CWE-451
Not analysed yet 12 Dec 2025
CVE-2025-64667 CVE record

CVSS 5.3 Medium

Microsoft Exchange Server Spoofing Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 23
- Microsoft Exchange Server 2019 Cumulative Update 14
- CWE-451
Not analysed yet 9 Dec 2025
CVE-2025-62223 CVE record

CVSS 4.3 Medium

Microsoft Edge (Chromium-based) for Mac Spoofing Vulnerability
- Microsoft Edge (Chromium-based)
- CWE-451
Not analysed yet 5 Dec 2025
CVE-2025-31266 CVE record

CVSS 4.3 Medium

Apple Safari: A spoofing issue was addressed with improved truncation when displaying the fully…
- Apple Safari
- Apple macOS
- CWE-451
Not analysed yet 21 Nov 2025
CVE-2025-13107 CVE record

CVSS 4.3 Medium

Google Chrome: Inappropriate implementation in Compositing in Google Chrome prior to 140.0.7339.80…
- Google Chrome
- CWE-451
Not analysed yet 14 Nov 2025
CVE-2024-7021 CVE record

CVSS 4.3 Medium

Google Chrome: Inappropriate implementation in Autofill in Google Chrome on Windows prior to…
- Google Chrome
- CWE-451
Not analysed yet 14 Nov 2025
CVE-2024-13178 CVE record

CVSS 4.3 Medium

Google Chrome: Inappropriate implementation in Fullscreen in Google Chrome prior to 128.0.6613.84…
- Google Chrome
- CWE-451
Not analysed yet 14 Nov 2025
CVE-2025-13102 CVE record

CVSS 4.3 Medium

Google Chrome: Inappropriate implementation in WebApp Installs in Google Chrome on Android prior to…
- Google Chrome
- CWE-451
Not analysed yet 14 Nov 2025
CVE-2024-11919 CVE record

CVSS 4.3 Medium

Google Chrome: Inappropriate implementation in Intents in Google Chrome on Android prior to…
- Google Chrome
- CWE-451
Not analysed yet 14 Nov 2025
drupal/core Packagist

CVSS 4.3 Medium

By generating and tricking a user into visiting a malicious URL, an attacker can perform site defacement.
- CWE-451
>=8.0.0, <10.4.9 || >=10.5.0, <10.5.6 || >=11.0.0, <11.1.9 || >=11.2.0, <11.2.8 · fixed in 10.4.9, 10.5.6, 11.1.9, 11.2.8

GHSA-h89p-5896-f4q8 · CVE-2025-13082 Not analysed yet 12 Nov 2025
CVE-2025-12729 CVE record

CVSS 4.2 Medium

Google Chrome: Inappropriate implementation in Omnibox in Google Chrome on Android prior to…
- Google Chrome
- CWE-451
Not analysed yet 10 Nov 2025
CVE-2025-12728 CVE record

CVSS 4.2 Medium

Google Chrome: Inappropriate implementation in Omnibox in Google Chrome on Android prior to…
- Google Chrome
- CWE-451
Not analysed yet 10 Nov 2025
CVE-2025-12446 CVE record

CVSS 4.2 Medium

Google Chrome: Incorrect security UI in SplitView in Google Chrome prior to 142.0.7444.59 allowed a…
- Google Chrome
- CWE-451
Not analysed yet 10 Nov 2025
CVE-2025-12435 CVE record

CVSS 5.4 Medium

Improper authorization in Google Chrome
- Google Chrome
- Broken access control
- CWE-451
Not analysed yet 10 Nov 2025
CVE-2025-12911 CVE record

CVSS 4.3 Medium

Google Chrome: Inappropriate implementation in Permissions in Google Chrome prior to 140.0.7339.80…
- Google Chrome
- CWE-451
Not analysed yet 7 Nov 2025
CVE-2025-11213 CVE record

CVSS 6.3 Medium

Google Chrome: Inappropriate implementation in Omnibox in Google Chrome on Android prior to…
- Google Chrome
- CWE-451
Not analysed yet 6 Nov 2025
CVE-2025-11212 CVE record

CVSS 6.3 Medium

Google Chrome: Inappropriate implementation in Media in Google Chrome on Windows prior to 141.0.7390.54…
- Google Chrome
- CWE-451
Not analysed yet 6 Nov 2025
CVE-2025-11208 CVE record

CVSS 6.3 Medium

Google Chrome: Inappropriate implementation in Media in Google Chrome prior to 141.0.7390.54 allowed a…
- Google Chrome
- CWE-451
Not analysed yet 6 Nov 2025
CVE-2025-11720 CVE record

CVSS 8.1 High

Spoofing risk in Android custom tabs
- Mozilla Firefox
- CWE-451
Not analysed yet 14 Oct 2025
CVE-2025-11718 CVE record

CVSS 6.5 Medium

Address bar could be spoofed on Android using visibilitychange
- Mozilla Firefox
- CWE-451
Not analysed yet 14 Oct 2025
org.wso2.identity.apps:authentication-portal Maven

CVSS 4.3 Medium

WSO2 Identity Server Apps allows content spoofing in logs
- CWE-451
<2.4.4 · fixed in 2.4.4

GHSA-r6f3-55wj-g9p3 · CVE-2024-6429 Not analysed yet 23 Sept 2025
CVE-2025-10290 CVE record

CVSS 6.5 Medium

Opening links via the contextual menu in Focus for iOS would not update the toolbar UI correctly, allowing attackers to spoof websites
- Mozilla Focus for iOS
- CWE-451
Not analysed yet 16 Sept 2025
CVE-2025-43327 CVE record

CVSS 6.5 Medium

The issue was addressed by adding additional logic.
- Apple Safari
- Apple macOS
- CWE-451
Not analysed yet 15 Sept 2025
CVE-2025-9867 CVE record

CVSS 5.4 Medium

Google Chrome: Inappropriate implementation in Downloads in Google Chrome on Android prior to…
- Google Chrome
- CWE-451
Not analysed yet 3 Sept 2025
CVE-2025-9865 CVE record

CVSS 5.4 Medium

Google Chrome: Inappropriate implementation in Toolbar in Google Chrome on Android prior to…
- Google Chrome
- CWE-451
Not analysed yet 3 Sept 2025
CVE-2025-9491 CVE record

CVSS 7.0 HighCritical · CVSS 7+ and EPSS

Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability
- Microsoft Windows
- CWE-451
Not analysed yet 26 Aug 2025
CVE-2025-8364 CVE record

CVSS 4.3 Medium

Address bar spoofing using an blob URI on Firefox for Android
- Mozilla Firefox
- CWE-451
Not analysed yet 19 Aug 2025
CVE-2025-8041 CVE record

CVSS 5.3 Medium

Incorrect URL truncation in Firefox for Android
- Mozilla Firefox
- CWE-451
Not analysed yet 19 Aug 2025
CVE-2025-9183 CVE record

CVSS 6.5 Medium

Spoofing issue in the Address Bar component
- Mozilla Firefox
- CWE-451
Not analysed yet 19 Aug 2025
CVE-2025-9186 CVE record

CVSS 6.5 Medium

Spoofing issue in the Address Bar component of Firefox Focus for Android
- Mozilla Firefox
- CWE-451
Not analysed yet 19 Aug 2025
CVE-2025-49755 CVE record

CVSS 4.3 Medium

Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
- Microsoft Edge for Android
- CWE-451
Not analysed yet 12 Aug 2025
CVE-2025-8583 CVE record

CVSS 4.3 Medium

Google Chrome: Inappropriate implementation in Permissions in Google Chrome prior to 139.0.7258.66…
- Google Chrome
- CWE-451
Not analysed yet 7 Aug 2025
CVE-2025-43228 CVE record

CVSS 4.3 Medium

The issue was addressed with improved UI.
- Apple Safari
- Apple iOS and iPadOS
- CWE-451
Not analysed yet 29 Jul 2025
generator-jhipster npm

CVSS 2.9 Low

Withdrawn Advisory: JHipster allows privilege escalation via a modified authorities parameter
- Broken access control
- CWE-451
<8.9.0 · fixed in 8.9.0

GHSA-cmm8-gw4m-26cw · CVE-2025-43712 Withdrawn Not analysed yet 25 Jul 2025
CVE-2025-8043 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Incorrect URL truncation
- Mozilla Firefox
- CWE-451
Not analysed yet 22 Jul 2025
CVE-2025-47963 CVE record

CVSS 6.3 Medium

Microsoft Edge (Chromium-based) Spoofing Vulnerability
- Microsoft Edge (Chromium-based)
- CWE-451
Not analysed yet 11 Jul 2025
CVE-2025-47964 CVE record

CVSS 5.4 Medium

Microsoft Edge (Chromium-based) Spoofing Vulnerability
- Microsoft Edge (Chromium-based)
- CWE-451
Not analysed yet 11 Jul 2025
CVE-2025-7021 CVE record

CVSS 6.9 Medium

OpenAI Operator - API Spoofing through Locking Operator on FullScreen
- OpenAI Operator
- CWE-451
Not analysed yet 10 Jul 2025
CVE-2024-39730 CVE record

CVSS 5.4 Medium

IBM Datacap clickjacking
- IBM Datacap
- CWE-451
Not analysed yet 28 Jun 2025
CVE-2025-5986 CVE record

CVSS 6.5 Medium

Unsolicited File Download, Disk Space Exhaustion, and Credential Leakage via mailbox:/// Links
- Mozilla Thunderbird
- CWE-451
Not analysed yet 11 Jun 2025
CVE-2025-5066 CVE record

CVSS 6.5 Medium

Google Chrome: Inappropriate implementation in Messages in Google Chrome on Android prior to…
- Google Chrome
- CWE-451
Not analysed yet 27 May 2025
CVE-2025-5065 CVE record

CVSS 6.5 Medium

Google Chrome: Inappropriate implementation in FileSystemAccess API in Google Chrome prior to…
- Google Chrome
- CWE-451
Not analysed yet 27 May 2025
CVE-2024-9163 CVE record

CVSS 3.5 Low

User Interface (UI) Misrepresentation of Critical Information in GitLab
- GitLab
- CWE-451
Not analysed yet 23 May 2025
CVE-2025-29825 CVE record

CVSS 6.5 Medium

Microsoft Edge (Chromium-based) Spoofing Vulnerability
- Microsoft Edge (Chromium-based)
- CWE-451
Not analysed yet 2 May 2025
CVE-2025-3859 CVE record

CVSS 4.3 Medium

Firefox Focus elide URL allows address bar spoofing
- Mozilla Focus
- CWE-451
Not analysed yet 30 Apr 2025
CVE-2025-4086 CVE record

CVSS 6.5 Medium

Specially crafted filename could be used to obscure download type
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-451
Not analysed yet 29 Apr 2025