User Interface (UI) Misrepresentation of Critical Information
CWE-451
The user interface (UI) does not properly represent critical information to the user, allowing the information - or its source - to be obscured or spoofed. This is often a component in phishing attacks.
We track 81 vulnerabilities of this type. 100% are rated high or critical, and the average CVSS score is 8.5. 2 have been exploited in real attacks.
How this weakness is prevented
- Implementation: Perform data validation (e.g. syntax, length, etc.) before interpreting the data.
- Architecture and Design: Create a strategy for presenting information, and plan for how to display unusual characters.
Latest User Interface (UI) Misrepresentation of Critical Information vulnerabilities
- 8.8 High severity
Chrome: User Interface (UI) Misrepresentation of Critical Information
UI misrepresentation in FullScreen in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
- 8.8 High severity
Chrome: User Interface (UI) Misrepresentation of Critical Information
UI misrepresentation in Passwords in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
- 8.8 High severity
Chrome: User Interface (UI) Misrepresentation of Critical Information
UI misrepresentation in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
- 8.8 High severity
Chrome: User Interface (UI) Misrepresentation of Critical Information
UI misrepresentation in WindowControlsOverlay in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to potentially spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
- 8.8 High severity
Chrome: User Interface (UI) Misrepresentation of Critical Information
UI misrepresentation in Browser in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
- 8.1 High severity
Firefox: User Interface (UI) Misrepresentation of Critical Information
Frame poisoning in the Layout component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, Thunderbird 153.5, and Firefox ESR 115.45.
- 8.1 High severity
better-auth: User Interface (UI) Misrepresentation of Critical Information
better-auth from 1.3.8-beta.3 before 1.7.0-rc.3 contains a UI misrepresentation vulnerability in the deviceAuthorization plugin because GET /device omits the requesting client_id and scope. Attackers can start a device request via /device/code, trick signed-in
- 7.4 High severity
Arc Search: User Interface (UI) Misrepresentation of Critical Information
Arc Search for Android before version 1.12.10 does not display a fullscreen notification when a page enters fullscreen mode while the app is running in the background. A remote attacker can exploit this via a specially crafted website to render fake UI element
- 7.4 High severity
Arc: User Interface (UI) Misrepresentation of Critical Information
An address bar spoofing issue in affected versions of Arc could allow an attacker to spoof the browser address bar via a <select> element that triggers requestFullscreen without displaying the fullscreen notification.
- 8.1 High severity
Chrome: User Interface (UI) Misrepresentation of Critical Information
UI misrepresentation in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: High)
- 7.5 High severity
Oracle WebCenter Content: Cross-Site Request Forgery
Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network a
- 7.5 High severity
Chrome: User Interface (UI) Misrepresentation of Critical Information
Inappropriate implementation in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker to perform UI spoofing via a malicious file. (Chromium security severity: Low)
- 8.0 High severity
OpenClaw: User Interface (UI) Misrepresentation of Critical Information
OpenClaw before 2026.5.18 contains an approval display truncation vulnerability allowing authenticated users to hide command suffixes from approvers. Attackers can submit oversized exec commands with benign prefixes and malicious suffixes to execute unauthoriz
- 8.8 High severity
Chrome: User Interface (UI) Misrepresentation of Critical Information
Incorrect security UI in Messages in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
- 8.8 High severity
Chrome: User Interface (UI) Misrepresentation of Critical Information
Incorrect security UI in Contact Picker in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
- 7.8 High severity
Android: User Interface (UI) Misrepresentation of Critical Information
In getAppLabel of ForgetDeviceDialogFragment.java, there is a possible trick the user into forgetting a device due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interacti
- 7.8 High severity
Android: User Interface (UI) Misrepresentation of Critical Information
In getApplicationLabel of KeyChainActivity.java, there is a possible way to trick the user into approving access to certificates due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges need
- 7.8 High severity
Android: User Interface (UI) Misrepresentation of Critical Information
In multiple locations, there is a possible misleading UI due to obfuscation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
- 7.8 High severity
Android: User Interface (UI) Misrepresentation of Critical Information
In getCallingAppLabel of CertInstaller.java, there is a possible way to hide a sensitive security dialogue due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction i
- 7.5 High severity
iOS and iPadOS: User Interface (UI) Misrepresentation of Critical Information
An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 18.7.3 and iPadOS 18.7.3, iOS 26.2 and iPadOS 26.2. An app may be able to access sensitive user data.
- 7.5 High severity
iOS and iPadOS: User Interface (UI) Misrepresentation of Critical Information
An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 26.5 and iPadOS 26.5, visionOS 26.5. An app may be able to access sensitive user data.
- 8.8 High severity
BigFix RunBookAI: Improper Neutralization of Special Elements used in a Command
HCL BigFix RunBookAI is affected by a Unvalidated Command Input / Potential Command Smuggling vulnerability. A flaw in a component's input handling was identified that could permit unauthorized command execution.
- 8.0 High severity
OpenClaw: User Interface (UI) Misrepresentation of Critical Information
OpenClaw before 2026.3.11 contains an approval-integrity vulnerability in node-host system.run approvals that displays extracted shell payloads instead of the executed argv. Attackers can place wrapper binaries and induce wrapper-shaped commands to execute loc
- 9.8 Critical severity
Firefox for iOS: User Interface (UI) Misrepresentation of Critical Information
Malicious scripts could cause desynchronization between the address bar and web content before a response is received in Firefox iOS, allowing attacker-controlled pages to be presented under spoofed domains. This vulnerability was fixed in Firefox for iOS 147.
- 9.8 Critical severity
Chrome: User Interface (UI) Misrepresentation of Critical Information
Incorrect security UI in Split View in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
- 9.8 Critical severity
Chrome: User Interface (UI) Misrepresentation of Critical Information
Incorrect security UI in Google Chrome on Android prior to 144.0.7559.59 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Low)
- 8.1 High severity
Firefox: User Interface (UI) Misrepresentation of Critical Information
The Firefox and Firefox Focus UI for the Android custom tab feature only showed the "site" that was loaded, not the full hostname. User supplied content hosted on a subdomain of a site could have been used to fool a user into thinking it was content from a dif
- 7.8 High severity
Windows: User Interface (UI) Misrepresentation of Critical Information
Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability
- 7.5 High severity
GitLab: User Interface (UI) Misrepresentation of Critical Information
A business logic error in GitLab CE/EE affecting all versions starting from 12.1 prior to 17.10.7, 17.11 prior to 17.11.3 and 18.0 prior to 18.0.1 where an attacker can cause a branch name confusion in confidential MRs.
- 7.2 High severity
phpMyFAQ: User Interface (UI) Misrepresentation of Critical Information
phpMyFAQ is an open source FAQ web application. Prior to version 3.2.10, a vulnerability exists in the FAQ Record component where a privileged attacker can trigger a file download on a victim's machine upon page visit by embedding it in an <iframe> element wit
- 8.2 High severity
Documenso: User Interface (UI) Misrepresentation of Critical Information
User Interface (UI) Misrepresentation of Critical Information vulnerability in Documenso allows Content Spoofing.Displayed version does not show the layer flattened version, once download, If printed (e.g. via Google Chrome -> Examine the print preview): Will
- 8.2 High severity
DropBox Sign: User Interface (UI) Misrepresentation of Critical Information
User Interface (UI) Misrepresentation of Critical Information vulnerability in DropBox Sign(HelloSign) allows Content Spoofing. Displayed version does not show the layer flattened version, once download, If printed (e.g. via Google Chrome -> Examine the print
- 8.2 High severity
DocuSign: User Interface (UI) Misrepresentation of Critical Information
User Interface (UI) Misrepresentation of Critical Information vulnerability in DocuSign allows Content Spoofing. The SaaS AI assistant ignores hidden content that is rendered after signing, misleading the user. For reference see: CVE-2024-52276 This issue affe
- 8.2 High severity
DocuSeal: User Interface (UI) Misrepresentation of Critical Information
User Interface (UI) Misrepresentation of Critical Information vulnerability in DocuSeal allows Content Spoofing.Displayed version does not show the layer flattened version, once download, If printed (e.g. via Google Chrome -> Examine the print preview): Will r
- 8.2 High severity
DocuSign: User Interface (UI) Misrepresentation of Critical Information
User Interface (UI) Misrepresentation of Critical Information vulnerability in DocuSign allows Content Spoofing. 1. Displayed version does not show the layer flattened version, which is provided when the "Print" option is used. 2. Displayed version does not sh
- 8.8 High severity
Microsoft Windows MSHTML Platform Spoofing Exploited
Windows MSHTML Platform Spoofing Vulnerability
- 7.5 High severity
Microsoft Windows MSHTML Platform Spoofing Exploited
Windows MSHTML Platform Spoofing Vulnerability
- 7.8 High severity
Android: User Interface (UI) Misrepresentation of Critical Information
In multiple functions of NotificationManagerService.java, there is a possible way to not show a toast message when a clipboard message has been accessed. This could lead to local escalation of privilege with no additional execution privileges needed. User inte
- 8.8 High severity
Firefox: User Interface (UI) Misrepresentation of Critical Information
A bug in popup notifications delay calculation could have made it possible for an attacker to trick a user into granting permissions. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.
- 8.2 High severity
mailcow-dockerized: URL Redirection to Untrusted Site
mailcow is a mailserver suite. A vulnerability innversions prior to 2022-09 allows an attacker to craft a custom Swagger API template to spoof Authorize links. This could redirect a victim to an attacker controller place to steal Swagger authorization credenti