CVE-2024-43461: User Interface (UI) Misrepresentation of Critical Information

Windows MSHTML Platform Spoofing Vulnerability...

CVE-2024-38197: User Interface (UI) Misrepresentation of Critical Information

Microsoft Teams for iOS Spoofing Vulnerability...

CVE-2024-7529: User Interface (UI) Misrepresentation of Critical Information

The date picker could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions. This vulnerability affects Firefox 129, Firefox ESR 115.14, Firefox ESR 128.1, Thunderbird 128.1, and Thunderbird 115.14...

CVE-2024-6595: User Interface (UI) Misrepresentation of Critical Information

An issue was discovered in GitLab CE/EE affecting all versions starting from 11.8 prior to 16.11.6, starting from 17.0 prior to 17.0.4, and starting from 17.1 prior to 17.1.2 where it was possible to upload an NPM package with conflicting package data...

CVE-2023-7011: User Interface (UI) Misrepresentation of Critical Information

Inappropriate implementation in Picture in Picture in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Medium...

CVE-2024-38112: User Interface (UI) Misrepresentation of Critical Information

Windows MSHTML Platform Spoofing Vulnerability...

CVE-2024-6610: User Interface (UI) Misrepresentation of Critical Information

Form validation popups could capture escape key presses. Therefore, spamming form validation messages could be used to prevent users from exiting full-screen mode. This vulnerability affects Firefox 128 and Thunderbird 128...

CVE-2024-38093: User Interface (UI) Misrepresentation of Critical Information

Microsoft Edge Chromium-based Spoofing Vulnerability...

CVE-2024-38082: User Interface (UI) Misrepresentation of Critical Information

Microsoft Edge Chromium-based Spoofing Vulnerability...

CVE-2024-38313: User Interface (UI) Misrepresentation of Critical Information

In certain scenarios a malicious website could attempt to display a fake location URL bar which could mislead users as to the actual website address This vulnerability affects Firefox for iOS 127...

CVE-2024-30055: User Interface (UI) Misrepresentation of Critical Information

Microsoft Edge Chromium-based Spoofing Vulnerability...

CVE-2024-23708: User Interface (UI) Misrepresentation of Critical Information

In multiple functions of NotificationManagerService.java, there is a possible way to not show a toast message when a clipboard message has been accessed. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitatio...

CVE-2023-50938: User Interface (UI) Misrepresentation of Critical Information

IBM PowerSC 1.3, 2.0, and 2.1 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks against the...

CVE-2024-0750: User Interface (UI) Misrepresentation of Critical Information

A bug in popup notifications delay calculation could have made it possible for an attacker to trick a user into granting permissions. This vulnerability affects Firefox 122, Firefox ESR 115.7, and Thunderbird 115.7...

CVE-2023-2938: User Interface (UI) Misrepresentation of Critical Information

Inappropriate implementation in Picture In Picture in Google Chrome prior to 114.0.5735.90 allowed a remote attacker who had compromised the renderer process to spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Medium...

CVE-2023-2941: User Interface (UI) Misrepresentation of Critical Information

Inappropriate implementation in Extensions API in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to install a malicious extension to spoof the contents of the UI via a crafted Chrome Extension. Chromium security severity: Low...

CVE-2023-2937: User Interface (UI) Misrepresentation of Critical Information

Inappropriate implementation in Picture In Picture in Google Chrome prior to 114.0.5735.90 allowed a remote attacker who had compromised the renderer process to spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Medium...

PT-2023-2464 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in the representation of information by the user interface in Windows operating systems. Exploitation of this issue may allow an attacker to conduct spoofing...

CVE-2023-0700: User Interface (UI) Misrepresentation of Critical Information

Inappropriate implementation in Download in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to potentially spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Medium...

CVE-2023-0130: User Interface (UI) Misrepresentation of Critical Information

Inappropriate implementation in in Fullscreen API in Google Chrome on Android prior to 109.0.5414.74 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Medium...