1368 matches found
Meta ordered to pay $942 million over harm to children
A New Mexico court has ordered Meta to pay a total of $942 million after finding that Facebook and Instagram harmed young users and that the company misled consumers about the safety of its platforms. Reportedly, the decision combines a $375 million civil-penalty verdict from March with a newly...
CVE-2026-18487: User Interface (UI) Misrepresentation of Critical Information
A flaw was found in Epiphany. An issue in how the browser reads web addresses allows attackers to fake the domain name shown in the address bar. If a user clicks a specially crafted link containing a colon for example, https://trusted.com:[email protected]/, the address bar and security menus will...
MAL-2026-12597 Malicious code in checkout-todo-test (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a87cb6c1e9ab39c21cd5d1031cadd2c192f86aaa337a62a7476657d5ee3f7f39 On require of this package, index.js loads platform.js, which asynchronously downloads a platform-specific binary from anonymous Cloudflare Workers...
MAL-2026-12667 Malicious code in csc-csc-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0339e6587ac1d675e493fc3edc1e7d325982284f794a681327053e1131ce689c On require of csc-csc-core, index.js loads init.js which downloads a platform-specific binary from string-split obfuscated Cloudflare Workers hostnam...
Malicious code in express-rate-controller (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 43c2ed4e91378e1ca9df444de58c0ff3afebce39741ab67011b55490740cac11 The package is published under the name express-rate-controller but describes itself as an SVG utilities library and ships a bin named svgcraft — the...
CVE-2026-17998: User Interface (UI) Misrepresentation of Critical Information
Incorrect security UI in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension. Chromium security severity: Low...
CVE-2026-17980: User Interface (UI) Misrepresentation of Critical Information
Inappropriate implementation in UI in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17941: User Interface (UI) Misrepresentation of Critical Information
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Low...
CVE-2026-17849: User Interface (UI) Misrepresentation of Critical Information
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to spoof the contents of the Omnibox URL bar via malicious network traffic. Chromium security severity: Medium...
CVE-2026-17840: User Interface (UI) Misrepresentation of Critical Information
Incorrect security UI in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17782: User Interface (UI) Misrepresentation of Critical Information
Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-64735: User Interface (UI) Misrepresentation of Critical Information
An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. A remote attacker may be able to...
EUVD-2026-46405
Tanium addressed a User Interface UI Misrepresentation of Critical Information vulnerability in Tanium Server...
CVE-2026-11925
Tanium addressed a User Interface UI Misrepresentation of Critical Information vulnerability in Tanium Server...
CVE-2026-11925 Tanium addressed a User Interface (UI) Misrepresentation of Critical Information vulnerability in Tanium Server.
Tanium addressed a User Interface UI Misrepresentation of Critical Information vulnerability in Tanium Server...
CVE-2026-11925 Tanium addressed a User Interface (UI) Misrepresentation of Critical Information vulnerability in Tanium Server.
Tanium addressed a User Interface UI Misrepresentation of Critical Information vulnerability in Tanium Server...
CVE-2026-11925
Technical details (affected component/version/root cause/impact) are not publicly available in the provided documents. Monitor for updates from Tanium and CVE records for any additional technical specifics.
CVE-2026-11925: User Interface (UI) Misrepresentation of Critical Information
Tanium addressed a User Interface UI Misrepresentation of Critical Information vulnerability in Tanium Server...
CVE-2026-16403: User Interface (UI) Misrepresentation of Critical Information
Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 153 and Thunderbird 153...
