#cwe-451

共收录 221 条相关情报。

← 返回所有主题
漏洞预警2026-06-04 发布INFO

Inappropriate implementation in WebUI in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform domain spoofing via a crafted domain name. (Chromium security ...

CVE-2026-11225

Inappropriate implementation in WebUI in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform domai

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-04 发布INFO

Incorrect security UI in Tab Strip in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security sever...

CVE-2026-11222

Incorrect security UI in Tab Strip in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform domain s

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-04 发布INFO

Incorrect security UI in File Input in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofi...

CVE-2026-11216

Incorrect security UI in File Input in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a us

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-04 发布INFO

Inappropriate implementation in Cronet in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform domain spoofing via a crafted domain name. (Chromi...

CVE-2026-11215

Inappropriate implementation in Cronet in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to p

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-04 发布INFO

Incorrect security UI in Messages in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security...

CVE-2026-11175

Incorrect security UI in Messages in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perfor

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-04 发布INFO

Incorrect security UI in Contact Picker in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium se...

CVE-2026-11172

Incorrect security UI in Contact Picker in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-04 发布INFO

Inappropriate implementation in Downloads in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security se...

CVE-2026-11107

Inappropriate implementation in Downloads in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform U

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-04 发布INFO

Inappropriate implementation in Accessibility in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chrom...

CVE-2026-10984

Inappropriate implementation in Accessibility in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attack

历史摘要 · 未重新核验 · NVD

安全公告2026-06-02 发布INFO

Dräger Infinity Explorer C700 contains a privilege escalation vulnerability that allows attackers...

CVE-2019-25718

Dräger Infinity Explorer C700 contains a privilege escalation vulnerability that allows attackers to break out of kiosk

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-02 发布INFO

In multiple locations, there is a possible misleading UI due to obfuscation. This could lead to...

CVE-2026-0093

In multiple locations, there is a possible misleading UI due to obfuscation. This could lead to local escalation of priv

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-02 发布INFO

In getApplicationLabel of KeyChainActivity.java, there is a possible way to trick the user into...

CVE-2026-0094

In getApplicationLabel of KeyChainActivity.java, there is a possible way to trick the user into approving access to cert

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-06-02 发布INFO

In getAppLabel of ForgetDeviceDialogFragment.java, there is a possible trick the user into...

CVE-2026-0096

In getAppLabel of ForgetDeviceDialogFragment.java, there is a possible trick the user into forgetting a device due to mi

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-01 发布INFO

Dräger Infinity Explorer C700 contains a privilege escalation vulnerability that allows attackers to break out of kiosk mode and access the underlying operating system through a...

CVE-2019-25718

Dräger Infinity Explorer C700 contains a privilege escalation vulnerability that allows attackers to break out of kiosk

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-01 发布INFO

In getAppLabel of ForgetDeviceDialogFragment.java, there is a possible trick the user into forgetting a device due to misleading or insufficient UI. This could lead to local esc...

CVE-2026-0096

In getAppLabel of ForgetDeviceDialogFragment.java, there is a possible trick the user into forgetting a device due to mi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-01 发布INFO

In getApplicationLabel of KeyChainActivity.java, there is a possible way to trick the user into approving access to certificates due to misleading or insufficient UI. This could...

CVE-2026-0094

In getApplicationLabel of KeyChainActivity.java, there is a possible way to trick the user into approving access to cert

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-01 发布INFO

In multiple locations, there is a possible misleading UI due to obfuscation. This could lead to local escalation of privilege with no additional execution privileges needed. Use...

CVE-2026-0093

In multiple locations, there is a possible misleading UI due to obfuscation. This could lead to local escalation of priv

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-01 发布INFO

In getCallingAppLabel of CertInstaller.java, there is a possible way to hide a sensitive security dialogue due to misleading or insufficient UI. This could lead to local escalat...

CVE-2026-0088

In getCallingAppLabel of CertInstaller.java, there is a possible way to hide a sensitive security dialogue due to mislea

历史摘要 · 未重新核验 · NVD

安全公告2026-05-27 发布INFO

Symfony's HtmlSanitizer URL Attributes Pass Through BiDi Override Characters → Visual href Spoofing

CVE-2026-45064

### Description `Symfony\Component\HtmlSanitizer\TextSanitizer\UrlSanitizer::parse()` (used by `UrlSanitizer::sanitize(

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-25 发布INFO

PuTTY 0.77 before 0.84 uses a copy of the PuTTY icon as a trust indication for TELNET data but the trust status is not cleared between proxy authentication and the main session.

CVE-2026-48851

PuTTY 0.77 before 0.84 uses a copy of the PuTTY icon as a trust indication for TELNET data but the trust status is not c

历史摘要 · 未重新核验 · NVD

安全公告2026-05-20 发布INFO

Inappropriate implementation in UI in Google Chrome on Windows prior to 148.0.7778.179 allowed a...

CVE-2026-9110

Inappropriate implementation in UI in Google Chrome on Windows prior to 148.0.7778.179 allowed a remote attacker who had

历史摘要 · 未重新核验 · GitHub Advisory