CLEANSTART-2024-SU55971 XSS bug in internal error pages could have led to various spoofing attacks, including other error pages and the address bar

Security vulnerability affects the librewolf package. An XSS bug in internal error pages could have led to various spoofing attacks, including other error pages and the address bar...

CLEANSTART-2024-XD03246 When exiting fullscreen mode, an iframe could have confused the browser about the current state of fullscreen, resulting in potential user confusion or spoofing attacks

CVE-2022-31738 affects multiple packages. When exiting fullscreen mode, an iframe could have confused the browser about the current state of fullscreen, resulting in potential user confusion or spoofing attacks. See references for individual vulnerability details...

CLEANSTART-2024-SH67272 malicious website that could create a popup could have resized the popup to overlay the address bar with its own content, resulting in potential user confusion or spoofing attacks

CVE-2022-34479 affects multiple packages. A malicious website that could create a popup could have resized the popup to overlay the address bar with its own content, resulting in potential user confusion or spoofing attacks. See references for individual vulnerability details...

CLEANSTART-2024-MG22285 If a custom mouse cursor is specified in CSS, under certain circumstances the cursor could have been drawn over the browser UI, resulting in potential user confusion or spoofing attacks

Security vulnerability affects the firefox-esr package. If a custom mouse cursor is specified in CSS, under certain circumstances the cursor could have been drawn over the browser UI, resulting in potential user confusion or spoofing attacks...

CLEANSTART-2024-MU96768 By misusing a race in our notification code, an attacker could have forcefully hidden the notification for pages that had received full screen and pointer lock access, which could have been used fo...

CVE-2021-43538 affects multiple packages. By misusing a race in our notification code, an attacker could have forcefully hidden the notification for pages that had received full screen and pointer lock access, which could have been used for spoofing attacks. See references for individual...

CLEANSTART-2024-KW13001 When exiting fullscreen mode, an iframe could have confused the browser about the current state of fullscreen, resulting in potential user confusion or spoofing attacks

CVE-2022-31738 affects multiple packages. When exiting fullscreen mode, an iframe could have confused the browser about the current state of fullscreen, resulting in potential user confusion or spoofing attacks. See references for individual vulnerability details...

CLEANSTART-2024-MN28501 By confusing the browser, the fullscreen notification could have been delayed or suppressed, resulting in potential user confusion or spoofing attacks

Security vulnerability affects the firefox-esr package. By confusing the browser, the fullscreen notification could have been delayed or suppressed, resulting in potential user confusion or spoofing attacks...

Astra Linux – Vulnerability in Firefox

A website can prevent a user from exiting full-screen mode through alerts and prompts. This can lead to user confusion and potential spoofing attacks. This vulnerability affects Firefox versions earlier than 115...

Google Chrome Fullscreen Spoofing

The vulnerability of Google Chrome’s fullscreen mode is related to errors in information representation by the user interface. Exploiting this vulnerability can allow a remote attacker to perform spoofing attacks...

ROS-20260720-73-0069

The vulnerability of the Speech component in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks remotely...

Netty HTTP Traffic Spoofing

The vulnerability of the HTTP traffic processing component of the framework used for developing network applications, servers, and Netty protocol clients is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to perform spoofing attacks remotely...

PuTTY Telnet Spoofing

The vulnerability of the Telnet protocol implementation in the cryptographic protection tool PuTTY is related to errors in information representation by the user interface. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks remotely...

Lack of vulnerability awareness in Microsoft Exchange Server

Microsoft has identified a vulnerability in Microsoft Exchange Server. This vulnerability involves a cross-site scripting XSS issue that arises due to improper handling of user input during the generation of web pages. An unauthorized attacker can inject malicious scripts and perform spoofing...

Azure Machine Learning Spoofing

The vulnerability of the software for working with Azure Machine Learning algorithms is related to the lack of measures taken to neutralize special elements in the output data. Exploiting this vulnerability allows a remote attacker to perform spearishing attacks...

Microsoft PowerPoint Android Access Control Error

The vulnerability of the Microsoft PowerPoint presentation preparation and viewing software on Android operating systems is related to access control errors. Exploiting this vulnerability can allow attackers to carry out spoofing attacks...

Azure Cloud Shell Spoofing

The vulnerability of the Azure Cloud Shell, a browser-based interactive environment, is related to the lack of data cleansing measures at the management level. Exploiting this vulnerability allows attackers to perform spear-phishing attacks remotely...

ROS-20260513-73-0012

Vulnerability in python-django related to spoofing authentication bypass. Exploitation of the vulnerability could allow an attacker acting remotely to conduct spoofing attacks...

ROS-20260508-73-0011

A vulnerability in the .NET software platform is related to incorrect handling of a missing special element. Exploitation of the vulnerability could allow an attacker acting remotely to conduct spoofing attacks...

BusyBox Information Disclosure

The vulnerability of the UNIX command-line utility BusyBox is related to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks...

Microsoft SharePoint Server Spoofing Vulnerability (CNVD-2026-19433)

Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A spoofing...