CVE-2026-58595

Improper restriction of rendered ui layers or frames in Microsoft Bing App for IOS allows an unauthorized attacker to perform spoofing over a network...

pyLoad vulnerable to Improper Restriction of Rendered UI Layers or Frames

Improper Restriction of Rendered UI Layers or Frames in GitHub repository pyload/pyload prior to 0.5.0b3.dev33...

The vulnerability of the `addWindow` method in the `WindowManagerService.java` class of the Android operating system’s Framework component allows a hacker to escalate their privileges.

The vulnerability of the addWindow method in the WindowManagerService.java class of the Android operating system’s framework component is related to an improper limitation on the number of displayed user interface layers or frames. Exploiting this vulnerability could allow a malicious individual ...

CVE-2026-9396 Besen BS20 EV Charging Station Firmware Version Check ui layer

A security flaw has been discovered in Besen BS20 EV Charging Station up to 20260426. Affected by this vulnerability is an unknown functionality of the component Firmware Version Check. The manipulation results in improper restriction of rendered ui layers. The attack can be executed remotely. A...

CVE-2026-9396

The CVE-2026-9396 entry concerns Besen BS20 EV Charging Station firmware (up to 20260426). Affected component: Firmware Version Check. The vulnerability is caused by an issue in the UI layer rendering, where manipulation can cause improper restriction of rendered UI layers. The attack is describe...

The vulnerability of the XWiki platform, a tool for creating collaborative web applications. XWiki allows attackers to execute a type of attack known as CSS Injection.

The vulnerability of the XWiki platform, a tool for creating collaborative web applications, lies in an improper limitation on the visible layers of the user interface. Exploiting this vulnerability could allow a malicious actor to carry out a type of CSS injection attack, with the assistance of...

The vulnerability of Google Chrome’s Digital Credentials component allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of Google Chrome’s Digital Credentials component is related to an improper limitation on the visible layers of the user interface. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

CVE-2025-59479

CHOCO TEI WATCHER mini IB-MCT001 contains an issue with improper restriction of rendered UI layers or frames. If a user clicks on content on a malicious web page while logged into the product, unintended operations may be performed on the product...

Improper Restriction of Rendered UI Layers or Frames

Overview feehi/cms is a Feehi CMS project template. Affected versions of this package are vulnerable to Improper Restriction of Rendered UI Layers or Frames via the Comments Management function. An attacker can manipulate user interactions by causing links to open in a new tab without proper...

CVE-2025-0421

Improper Restriction of Rendered UI Layers or Frames vulnerability in Shopside Software Technologies Inc. Shopside allows iFrame Overlay.This issue affects Shopside: through 05022025...

EUVD-2025-198157

Improper Restriction of Rendered UI Layers or Frames vulnerability in Shopside Software Technologies Inc. Shopside allows iFrame Overlay.This issue affects Shopside: through 05022025...

The vulnerability of the microprogrammed industrial digital gas analyzer MEAC300-FNADE4 lies in the improper limitation of the displayed user interface layers, which allows a intruder to compromise the integrity of the protected information.

The vulnerability of the microprogrammed industrial digital gas analyzer MEAC300-FNADE4 is related to an improper limitation on the displayed layers of the user interface. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

CVE-2025-9108

Affected is an unknown function of the component Login Page. The manipulation leads to improper restriction of rendered ui layers. It is possible to launch the attack remotely...

CVE-2025-9108

CVE-2025-9108 affects Portabilis i-Diário’s Login Page UI layer. The root cause is an issue with improper restriction of rendered UI layers caused by manipulation of an unknown function, enabling remote exploitation. The PT-2025-33637 entry notes the vulnerable component and that exploit can be p...

CVE-2025-9108 Portabilis i-Diario Login Page ui layer

Affected is an unknown function of the component Login Page. The manipulation leads to improper restriction of rendered ui layers. It is possible to launch the attack remotely...

The vulnerability of the SIEM systems’ load testing tools, such as the Kraken Stress Testing Toolkit, arises from improper restrictions on the visible layers of the user interface. This allows attackers to compromise the integrity of the protected information.

The vulnerability of the SIEM systems’ load testing tools, such as the Kraken Stress Testing Toolkit, is related to improper restrictions on the visible layers of the user interface. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected informati...

The vulnerability of the Mozilla Firefox browser and the Thunderbird email client relates to improper limitation of the number of user interface layers or frames displayed. This allows attackers to perform spoofing attacks.

The vulnerability of the Mozilla Firefox browser and the Thunderbird email client is related to improper restrictions on the layers or frames that are displayed in the user interface. Exploiting this vulnerability allows a remote attacker to perform spoofing attacks...

The vulnerability of the UI components in operating systems such as visionOS, iOS, iPadOS, macOS, and the Safari browser allows attackers to gain unauthorized access to confidential data.

The vulnerability of the UI components in operating systems such as visionOS, iOS, iPadOS, macOS, and the Safari browser is related to an improper limitation on the layers of the user interface that can be displayed. Exploiting this vulnerability may allow a remote attacker to gain unauthorized...

The vulnerability of the Mozilla Firefox browser and the Thunderbird email client on Android operating systems stems from an improper limitation on the displayed layers of the user interface. This allows attackers to execute a type of attack known as tapjacking.

The vulnerability of the Mozilla Firefox browser and the Thunderbird email client on Android operating systems is related to an improper limitation on the displayed layers of the user interface. Exploiting this vulnerability allows a remote attacker to perform a type of attack known as tapjacking...

The vulnerability of Firefox browser, related to improper limitation of the number of user interface layers or frames displayed, allows attackers to perform spoofing attacks.

The vulnerability of Firefox browsers is related to improper limitation of the number of user interface layers or frames that can be displayed. Exploiting this vulnerability allows a remote attacker to perform spoofing attacks...