Skip to content
OpenAdvisories

Weakness (CWE)

CWE-451: User Interface (UI) Misrepresentation of Critical Information

Class Draft

The user interface (UI) does not properly represent critical information to the user, allowing the information - or its source - to be obscured or spoofed. This is often a component in phishing attacks.

How to prevent it (2 mitigations)

  1. Implementation

    Perform data validation (e.g. syntax, length, etc.) before interpreting the data.

  2. Architecture and Design

    Create a strategy for presenting information, and plan for how to display unusual characters.

Source: MITRE CWE-451

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-11107 Public exploit

    Inappropriate implementation in Downloads in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform …

    Google Chrome chromium Browsers Debian
  • High 7.0
    CVE-2025-9491 Public exploit EPSS 76%

    Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability

    Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerabilit…

    Microsoft Windows Windows
  • Medium 4.9
    CVE-2024-55889 Public exploit

    phpMyFAQ Vulnerable to Unintended File Download Triggered by Embedded Frames

    phpMyFAQ is an open source FAQ web application. Prior to version 3.2.10, a vulnerability exists in the FAQ Record component where a privileged attacker can trigger a file download on a victim's machine upon page visit by embedding it in an <iframe> element wi…

    thorsten phpMyFAQ thorsten/phpmyfaq Packagist
  • High 7.5
    CVE-2024-38112 Exploited Public exploit EPSS 84%

    Windows MSHTML Platform Spoofing Vulnerability

    Windows MSHTML Platform Spoofing Vulnerability

    Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
    KEV Jul 9, 2024
  • Critical 9.8
    CVE-2024-23708 Public exploit

    In multiple functions of NotificationManagerService.java, there is a possible way to not show a toast message when a cl…

    Google Android Android