#cwe-451

共收录 221 条相关情报。

← 返回所有主题
漏洞预警2026-05-20 发布INFO

Inappropriate implementation in UI in Google Chrome on Windows prior to 148.0.7778.179 allowed a remote attacker who had compromised the renderer process to perform UI spoofing ...

CVE-2026-9110

Inappropriate implementation in UI in Google Chrome on Windows prior to 148.0.7778.179 allowed a remote attacker who had

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. In versions 0.102.1 and prior, the Electron configura...

CVE-2026-39309

Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bas

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-19 发布INFO

Spoofing issue in the Popup Blocker component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.

CVE-2026-8964

Spoofing issue in the Popup Blocker component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.

历史摘要 · 未重新核验 · NVD

安全公告2026-05-14 发布INFO

Inappropriate implementation in Views in Google Chrome on iOS prior to 148.0.7778.168 allowed a...

CVE-2026-8584

Inappropriate implementation in Views in Google Chrome on iOS prior to 148.0.7778.168 allowed a remote attacker who had

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-14 发布INFO

Incorrect security UI in Downloads in Google Chrome on Android and Mac prior to 148.0.7778.168...

CVE-2026-8564

Incorrect security UI in Downloads in Google Chrome on Android and Mac prior to 148.0.7778.168 allowed a remote attacker

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-14 发布INFO

Incorrect security UI in Fullscreen in Google Chrome prior to 148.0.7778.168 allowed a remote...

CVE-2026-8561

Incorrect security UI in Fullscreen in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to perform UI spo

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-14 发布INFO

Inappropriate implementation in Downloads in Google Chrome on Mac prior to 148.0.7778.168 allowed...

CVE-2026-8565

Inappropriate implementation in Downloads in Google Chrome on Mac prior to 148.0.7778.168 allowed an attacker who convin

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-14 发布INFO

Inappropriate implementation in Views in Google Chrome on iOS prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform UI spoofing v...

CVE-2026-8584

Inappropriate implementation in Views in Google Chrome on iOS prior to 148.0.7778.168 allowed a remote attacker who had

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-14 发布INFO

Inappropriate implementation in Downloads in Google Chrome on Mac prior to 148.0.7778.168 allowed an attacker who convinced a user to install a malicious extension to perform UI...

CVE-2026-8565

Inappropriate implementation in Downloads in Google Chrome on Mac prior to 148.0.7778.168 allowed an attacker who convin

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-14 发布INFO

Incorrect security UI in Downloads in Google Chrome on Android and Mac prior to 148.0.7778.168 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromiu...

CVE-2026-8564

Incorrect security UI in Downloads in Google Chrome on Android and Mac prior to 148.0.7778.168 allowed a remote attacker

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-14 发布INFO

Incorrect security UI in Fullscreen in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severit...

CVE-2026-8561

Incorrect security UI in Fullscreen in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to perform UI spo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-42891

User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-40416

User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-35429

User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attac

历史摘要 · 未重新核验 · NVD

安全公告2026-05-12 发布INFO

SAPUI5 (Search UI) allows an unauthenticated attacker to manipulate specific URL parameters on...

CVE-2026-34258

SAPUI5 (Search UI) allows an unauthenticated attacker to manipulate specific URL parameters on the Search UI to include

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-12 发布MEDIUM

SAPUI5 (Search UI) allows an unauthenticated attacker to manipulate specific URL parameters on the Search UI to include malicious content. Successful exploitation may mislead vi...

CVE-2026-34258

CVE-2026-34258 是 SAPUI5 组件中 Search UI 的一个漏洞。未经身份验证的攻击者可以通过操纵特定的 URL 参数,在 Search UI 中注入恶意内容,从而诱导受害者用户点击这些链接并访问由应用程序渲染的攻击者

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-11 发布INFO

Zen is a firefox-based browser. Prior to 1.19.12b, the ZEN Browser incorrectly truncates long hostnames in the address bar and shows only the attacker-controlled prefix of the s...

CVE-2026-44659

Zen is a firefox-based browser. Prior to 1.19.12b, the ZEN Browser incorrectly truncates long hostnames in the address b

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-06 发布INFO

Insufficient policy enforcement in WebApp in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security se...

CVE-2026-8019

Insufficient policy enforcement in WebApp in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform U

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-06 发布INFO

Inappropriate implementation in Media in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severi...

CVE-2026-8015

Inappropriate implementation in Media in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform UI sp

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-06 发布INFO

Inappropriate implementation in DevTools in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing...

CVE-2026-8008

Inappropriate implementation in DevTools in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a use

历史摘要 · 未重新核验 · NVD