Weakness (CWE)

CWE-449: The UI Performs the Wrong Action

Base Incomplete

The UI performs the wrong action with respect to the user's request.

Source: MITRE CWE-449

All Critical High Medium Low Exploited only Public exploit

14 results · Feed

Medium 4.3

CVE-2025-13637

Inappropriate implementation in Downloads in Google Chrome prior to 143.0.7499.41 allowed a remote attacker who convinc…

Google Chrome chromium Browsers Debian

Dec 2, 2025
Medium 5.3

CVE-2025-56139

LinkedIn Mobile Application for Android version 4.1.1087.2 fails to update link preview metadata (image, title, descrip…

Sep 3, 2025
Medium 4.3

CVE-2025-49736

Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

The ui performs the wrong action in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network.

Microsoft Microsoft Edge for Android Android Browsers

Aug 12, 2025
Medium 5.4

CVE-2025-26643

Microsoft Edge (Chromium-based) Spoofing Vulnerability

The UI performs the wrong action in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

Microsoft Microsoft Edge (Chromium-based) Browsers

Mar 7, 2025
Medium 4.3

CVE-2025-21404

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Feb 6, 2025
Medium 4.3

CVE-2024-49041

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Dec 6, 2024
Medium 4.3

CVE-2024-43577

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Oct 18, 2024
Medium 4.3

CVE-2024-38083

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Microsoft Microsoft Edge for Android Microsoft Edge for iOS Android iOS Browsers

Jun 13, 2024
Medium 4.9

CVE-2024-24698

Zoom Clients - Improper Authentication

Improper authentication in some Zoom clients may allow a privileged user to conduct a disclosure of information via local access.

Zoom Video Communications Zoom Clients

Feb 13, 2024
High 7.1

CVE-2023-43585

Improper access control in Zoom Mobile App for iOS and Zoom SDKs for iOS before version 5.16.5 may allow an authenticat…

Zoom Video Communications Zoom Mobile App for iOS and SDKs for iOS iOS

Dec 13, 2023
Low 3.5

CVE-2023-43588

Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information dis…

Zoom Video Communications Zoom Clients

Nov 14, 2023
High 7.1

CVE-2023-39215

Improper authentication in Zoom clients may allow an authenticated user to conduct a denial of service via network acce…

Zoom Video Communications Zoom Clients

Sep 12, 2023
Medium 5.9

CVE-2023-39209

Improper input validation in Zoom Desktop Client for Windows before 5.15.5 may allow an authenticated user to enable an…

Zoom Video Communications Zoom Desktop Client for Windows Windows

Aug 8, 2023
High 7.1

CVE-2023-36535

Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow an authenticated user to enabl…

Zoom Video Communications Zoom Clients

Aug 8, 2023