過去6か月のすべてのCVEを、毎日更新します。

223件中150件を表示

• 中CVE-2026-93386CVSSスコア 5.42026/09/17

  UI misrepresentation in WebAppInstalls in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)

  CWE-451google chrome
• 中CVE-2026-92069CVSSスコア 5.42026/09/15

  Spoofing issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3.

  CWE-451
• 中CVE-2026-87653CVSSスコア 5.42026/09/09

  UI misrepresentation in FullScreen in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)

  CWE-451google chromemicrosoft windows
• 中CVE-2026-87649CVSSスコア 5.42026/09/09

  UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chrome
• 中CVE-2026-87635CVSSスコア 5.42026/09/09

  UI misrepresentation in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chrome
• 中CVE-2026-87624CVSSスコア 4.22026/09/09

  UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)

  CWE-451google chromegoogle android
• 中CVE-2026-87597CVSSスコア 4.82026/09/09

  UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof address bar via a co-installed app. (Chromium security severity: Low)

  CWE-451google chromegoogle android
• 中CVE-2026-87583CVSSスコア 5.42026/09/09

  UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)

  CWE-451google chromegoogle android
• 中CVE-2026-87567CVSSスコア 4.32026/09/09

  UI misrepresentation in UrlFormatting in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof address bar via a crafted domain name. (Chromium security severity: Medium)

  CWE-451google chrome
• 中CVE-2026-87559CVSSスコア 4.22026/09/09

  UI misrepresentation in UI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chrome
• 中CVE-2026-87507CVSSスコア 5.42026/09/09

  UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chrome
• 中CVE-2026-87501CVSSスコア 5.42026/09/09

  UI misrepresentation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chrome
• 中CVE-2026-87496CVSSスコア 5.42026/09/09

  UI misrepresentation in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chrome
• 中CVE-2026-87484CVSSスコア 5.42026/09/09

  UI misrepresentation in Geometry in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chrome
• 中CVE-2026-87462CVSSスコア 5.42026/09/09

  UI misrepresentation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chrome
• 中CVE-2026-87458CVSSスコア 5.42026/09/09

  UI misrepresentation in Geometry in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chrome
• 中CVE-2026-87445CVSSスコア 5.42026/09/09

  UI misrepresentation in Session in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chrome
• 中CVE-2026-86853CVSSスコア 4.32026/09/08

  A malicious webpage could repeatedly trigger external URL schemes, causing system prompts or external application launches. This could make Firefox for iOS temporarily unusable until the page is closed. This vulnerability was fixed in Firefox for iOS 155.1.

  CWE-451
• 低CVE-2025-52652CVSSスコア 3.52026/09/07

  HCL MyXalytics was affected by Content Spoofing Vulnerability. It may allow an attacker to manipulate displayed content, making it appear as though it originates from a trusted source, potentially leading to phishing or data theft.

  CWE-451
• 低CVE-2026-63020CVSSスコア 3.12026/09/02

  A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker to spoof error messages Impact: An attacker may trick authenticated BIG-IP users into accessing malicious links and reflect a spoofed error message in the vic

  CWE-451f5 big-ip_access_policy_managerf5 big-ip_advanced_firewall_managerf5 big-ip_advanced_web_application_firewall
• 中CVE-2026-84356CVSSスコア 4.32026/09/02

  UI misrepresentation in FullScreen in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Low)

  CWE-451google chrome
• 中CVE-2026-84330CVSSスコア 5.42026/09/02

  UI misrepresentation in FullScreen in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chromegoogle android
• 中CVE-2026-84137CVSSスコア 4.32026/09/01

  Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.

  CWE-346CWE-451mozilla firefoxmozilla thunderbird
• 中CVE-2026-81267CVSSスコア 5.42026/08/31

  A malicious webpage could stall a popup's cross-origin navigation after commit, causing the address bar to display the destination origin while continuing to render attacker-controlled content. This vulnerability was fixed in Firefox for iOS 155.0.

  CWE-451mozilla firefox_mobile
• 中CVE-2026-79284CVSSスコア 4.32026/08/25

  UI misrepresentation in Core in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)

  CWE-451google chromeapple macos
• 中CVE-2026-79283CVSSスコア 5.42026/08/25

  UI misrepresentation in Geometry in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chrome
• 中CVE-2026-79250CVSSスコア 5.42026/08/25

  UI misrepresentation in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chrome
• 中CVE-2026-79233CVSSスコア 4.32026/08/25

  UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Low)

  CWE-451google chromegoogle android
• 中CVE-2026-79204CVSSスコア 5.42026/08/25

  UI misrepresentation in Input in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chromeapple macos
• 中CVE-2026-79180CVSSスコア 5.42026/08/25

  UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chromegoogle android
• 中CVE-2026-79176CVSSスコア 6.52026/08/25

  UI misrepresentation in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. (Chromium security severity: Medium)

  CWE-451google chrome
• 中CVE-2026-79173CVSSスコア 5.42026/08/25

  UI misrepresentation in WebAppInstalls in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chrome
• 中CVE-2026-79108CVSSスコア 6.52026/08/25

  UI misrepresentation in Web Authentication (Passkeys & Security Keys) in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low

  CWE-451google chrome
• 中CVE-2026-79098CVSSスコア 4.32026/08/25

  UI misrepresentation in PermissionElement in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)

  CWE-451google chrome
• 中CVE-2026-79022CVSSスコア 4.32026/08/25

  UI misrepresentation in Transactions Platform in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially spoof UI elements via a crafted HTML page. (Chromium security severity: Low)

  CWE-451google chrome
• 高CVE-2026-79011CVSSスコア 8.12026/08/25

  UI misrepresentation in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: High)

  CWE-451google chrome
• 中CVE-2026-79009CVSSスコア 4.32026/08/25

  UI misrepresentation in UI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)

  CWE-451google chrome
• 中CVE-2026-78974CVSSスコア 5.42026/08/25

  UI misrepresentation in Linux Toolkit Theming in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)

  CWE-451google chrome
• 中CVE-2026-78912CVSSスコア 5.42026/08/25

  UI misrepresentation in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chrome
• 中CVE-2026-74975CVSSスコア 5.42026/08/18

  Spoofing issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154.

  CWE-451mozilla firefox_mobile
• 中CVE-2026-18622CVSSスコア 4.72026/08/13

  Foxit PDF Editor/Reader inconsistently alerts users when signature fields are abnormally modified, including alterations to appearance, coordinates, or field duplication. This may mislead users into trusting tampered documents, since the UI cannot accurately r

  CWE-451foxit pdf_editorfoxit pdf_readermicrosoft windows
• 中CVE-2026-18487CVSSスコア 5.42026/08/06

  A flaw was found in Epiphany. An issue in how the browser reads web addresses allows attackers to fake the domain name shown in the address bar. If a user clicks a specially crafted link containing a colon (for example, [https://trusted.com:[email protected]/](h

  CWE-451
• 中CVE-2026-18018CVSSスコア 4.02026/07/30

  Inappropriate implementation in Updater in Google Chrome on Windows prior to 151.0.7922.72 allowed a local attacker to perform UI spoofing via a malicious file. (Chromium security severity: Low)

  CWE-451google chromemicrosoft windows
• 中CVE-2026-18013CVSSスコア 4.32026/07/30

  Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

  CWE-451google chromeapple iphone_os
• 中CVE-2026-18010CVSSスコア 4.32026/07/30

  Inappropriate implementation in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffic. (Chromium security severity: Low)

  CWE-451google chrome
• 中CVE-2026-18009CVSSスコア 4.32026/07/30

  Insufficient validation of untrusted input in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffic. (Chromium security severity: Low)

  CWE-20CWE-451google chrome
• 中CVE-2026-18008CVSSスコア 4.32026/07/30

  Inappropriate implementation in Settings in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffic. (Chromium security severity: Low)

  CWE-451google chrome
• 中CVE-2026-18007CVSSスコア 4.32026/07/30

  Inappropriate implementation in Input in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

  CWE-451google chromegoogle android
• 中CVE-2026-18006CVSSスコア 4.32026/07/30

  Inappropriate implementation in Google Lens in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

  CWE-451google chrome
• 中CVE-2026-18003CVSSスコア 4.32026/07/30

  Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

  CWE-451google chromeapple iphone_os
• 中CVE-2026-17998CVSSスコア 4.32026/07/30

  Incorrect security UI in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension. (Chromium security severity: Low)

  CWE-451google chrome
• 中CVE-2026-17983CVSSスコア 4.32026/07/30

  Inappropriate implementation in Global Media Controls in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

  CWE-451google chrome
• 低CVE-2026-17980CVSSスコア 3.12026/07/30

  Inappropriate implementation in UI in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: Low)

  CWE-451google chromegoogle android
• 中CVE-2026-17972CVSSスコア 4.32026/07/30

  Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

  CWE-451google chromeapple iphone_os
• 中CVE-2026-17965CVSSスコア 4.32026/07/30

  Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

  CWE-451google chromeapple iphone_os
• 中CVE-2026-17964CVSSスコア 4.32026/07/30

  Incorrect security UI in UI in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Low)

  CWE-451google chromegoogle android
• 中CVE-2026-17958CVSSスコア 4.32026/07/30

  Inappropriate implementation in Views in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

  CWE-451google chrome
• 中CVE-2026-17945CVSSスコア 4.32026/07/30

  Insufficient validation of untrusted input in Navigation in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

  CWE-451google chrome
• 中CVE-2026-17941CVSSスコア 4.32026/07/30

  Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Low)

  CWE-451google chromeapple iphone_os
• 中CVE-2026-17938CVSSスコア 4.32026/07/30

  Inappropriate implementation in FullScreen in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

  CWE-451google chromegoogle android
• 中CVE-2026-17915CVSSスコア 5.42026/07/30

  Inappropriate implementation in WebView in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

  CWE-451google chromegoogle android
• 中CVE-2026-17913CVSSスコア 5.42026/07/30

  Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

  CWE-451google chromeapple iphone_os
• 中CVE-2026-17874CVSSスコア 5.42026/07/30

  Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chromeapple iphone_os
• 中CVE-2026-17849CVSSスコア 4.32026/07/30

  Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via malicious network traffic. (Chromium security severity: Medium)

  CWE-451google chromeapple iphone_os
• 中CVE-2026-17840CVSSスコア 6.52026/07/30

  Incorrect security UI in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chrome
• 中CVE-2026-17839CVSSスコア 6.52026/07/30

  Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chromeapple iphone_os
• 中CVE-2026-17838CVSSスコア 6.52026/07/30

  Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chromeapple iphone_os
• 中CVE-2026-17835CVSSスコア 6.52026/07/30

  Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chromeapple iphone_os
• 中CVE-2026-17828CVSSスコア 6.52026/07/30

  Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chromeapple iphone_os
• 中CVE-2026-17819CVSSスコア 6.52026/07/30

  Inappropriate implementation in WebAppInstalls in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chrome
• 中CVE-2026-17812CVSSスコア 5.42026/07/30

  Inappropriate implementation in DigitalCredentials in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chrome
• 中CVE-2026-17793CVSSスコア 6.52026/07/30

  Inappropriate implementation in Messages in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chromegoogle android
• 中CVE-2026-17792CVSSスコア 6.52026/07/30

  Inappropriate implementation in Credential Management in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chrome
• 中CVE-2026-17782CVSSスコア 4.32026/07/30

  Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chromeapple iphone_os
• 中CVE-2026-17755CVSSスコア 4.32026/07/30

  Incorrect security UI in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension. (Chromium security severity: Medium)

  CWE-451google chrome
• 中CVE-2026-17747CVSSスコア 4.22026/07/30

  Insufficient validation of untrusted input in Payments in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

  CWE-20CWE-451google chromegoogle android
• 中CVE-2026-64735CVSSスコア 6.52026/07/27

  An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS 26.6, macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 2

  CWE-451apple ipadosapple iphone_osapple macos
• 中CVE-2026-64730CVSSスコア 6.52026/07/27

  The issue was addressed with improved UI. This issue is fixed in Safari 26.6, iOS 26.6 and iPadOS 26.6, macOS Tahoe 26.6, tvOS 26.6, visionOS 26.6, watchOS 26.6. Visiting a website that frames malicious content may lead to UI spoofing.

  CWE-451apple safariapple ipadosapple iphone_os
• 高CVE-2026-60658CVSSスコア 7.52026/07/21

  Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network a

  CWE-352CWE-451CWE-601oracle webcenter_content
• 低CVE-2026-11925CVSSスコア 2.72026/07/21

  Tanium addressed a User Interface (UI) Misrepresentation of Critical Information vulnerability in Tanium Server.

  CWE-451tanium server
• 中CVE-2026-16403CVSSスコア 6.52026/07/21

  Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

  CWE-451mozilla firefoxmozilla thunderbird
• 中CVE-2026-45150CVSSスコア 6.32026/07/15

  Zen is a firefox-based browser. Prior to 1.19.13b, Zen Browser did not provide a persistent, clearly visible security notification when a webpage entered fullscreen mode, allowing an attacker-controlled page to hide the real browser UI and origin information,

  CWE-451
• 中CVE-2026-48760CVSSスコア 6.12026/07/14

  Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.1.0 until 6.4.41, 7.4.13, and 8.0.13, UrlSanitizer::parse() rejected raw BiDi formatting characters but not percent-encoded forms and used an ASCII-only wh

  CWE-451CWE-1007sensiolabs symfony
• 中CVE-2026-45064CVSSスコア 6.12026/07/14

  Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.1.0-BETA1 until 6.4.40, 7.4.12, and 8.0.12, UrlSanitizer::parse() passes Unicode explicit-direction BiDi formatting characters through into sanitized href

  CWE-451CWE-1007sensiolabs symfony
• 中CVE-2026-13356CVSSスコア 6.32026/07/07

  A malicious webpage could interrupt a pending navigation by enqueuing a synchronous JavaScript dialog, causing the browser UI to display the destination origin in the address bar while continuing to render attacker-controlled content. This vulnerability was fi

  CWE-451mozilla firefox
• 中CVE-2026-45488CVSSスコア 5.42026/07/03

  User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

  CWE-451microsoft edge_chromium
• 中CVE-2026-14410CVSSスコア 4.32026/07/01

  Inappropriate implementation in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

  CWE-451google chrome
• 中CVE-2026-14404CVSSスコア 6.52026/07/01

  Inappropriate implementation in PDFium in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to perform UI spoofing via a crafted PDF file. (Chromium security severity: Medium)

  CWE-451google chrome
• 中CVE-2026-14381CVSSスコア 6.52026/07/01

  Incorrect security UI in WebAppInstalls in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

  CWE-290CWE-451google chrome
• 中CVE-2026-14154CVSSスコア 4.82026/06/30

  Inappropriate implementation in DevTools in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension. (Chromium security severity: Low)

  CWE-451google chromeapple macoslinux linux_kernel
• 中CVE-2026-14153CVSSスコア 5.32026/06/30

  Inappropriate implementation in Glic in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

  CWE-451google chromeapple macoslinux linux_kernel
• 中CVE-2026-14144CVSSスコア 4.22026/06/30

  Incorrect security UI in Views in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

  CWE-451google chromeapple macoslinux linux_kernel
• 中CVE-2026-14143CVSSスコア 4.32026/06/30

  Incorrect security UI in Passwords in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

  CWE-451google chromeapple iphone_os
• 中CVE-2026-14142CVSSスコア 5.42026/06/30

  Inappropriate implementation in Extensions in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

  CWE-1021CWE-451google chrome
• 中CVE-2026-14141CVSSスコア 4.32026/06/30

  Incorrect security UI in Document Picture-in-Picture in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Low)

  CWE-451google chromegoogle android
• 中CVE-2026-14139CVSSスコア 4.22026/06/30

  Inappropriate implementation in TabStrip in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

  CWE-451google chromeapple macoslinux linux_kernel
• 中CVE-2026-14138CVSSスコア 4.22026/06/30

  Inappropriate implementation in WebAppInstalls in Google Chrome on Windows prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

  CWE-451google chromemicrosoft windows
• 中CVE-2026-14136CVSSスコア 4.32026/06/30

  Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

  CWE-451google chromeapple iphone_os
• 中CVE-2026-14134CVSSスコア 4.32026/06/30

  Inappropriate implementation in Autofill in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

  CWE-451google chromegoogle android
• 中CVE-2026-14132CVSSスコア 5.42026/06/30

  Inappropriate implementation in WebXR in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

  CWE-451google chrome
• 中CVE-2026-14130CVSSスコア 4.32026/06/30

  Incorrect security UI in Omnibox in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

  CWE-20CWE-451google chrome
• 中CVE-2026-14129CVSSスコア 4.22026/06/30

  Inappropriate implementation in PreviewTab in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

  CWE-451google chromegoogle android
• 中CVE-2026-14128CVSSスコア 4.32026/06/30

  Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Low)

  CWE-451google chromeapple iphone_os
• 中CVE-2026-14127CVSSスコア 4.32026/06/30

  Inappropriate implementation in Printing in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

  CWE-20CWE-451google chrome
• 中CVE-2026-14126CVSSスコア 4.32026/06/30

  Incorrect security UI in UI in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Low)

  CWE-451google chromegoogle android
• 中CVE-2026-14123CVSSスコア 4.32026/06/30

  Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Low)

  CWE-451google chromeapple iphone_os
• 高CVE-2026-14114CVSSスコア 7.52026/06/30

  Inappropriate implementation in WebAppInstalls in Google Chrome on Android prior to 150.0.7871.47 allowed a local attacker to perform UI spoofing via a malicious file. (Chromium security severity: Low)

  CWE-451google chromegoogle android
• 中CVE-2026-14110CVSSスコア 4.32026/06/30

  Inappropriate implementation in DarkMode in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

  CWE-1021CWE-451google chrome
• 中CVE-2026-14077CVSSスコア 4.32026/06/30

  Inappropriate implementation in Select in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Low)

  CWE-451google chromeapple macos
• 中CVE-2026-14072CVSSスコア 4.32026/06/30

  Inappropriate implementation in SplitView in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

  CWE-451google chrome
• 中CVE-2026-14042CVSSスコア 4.32026/06/30

  Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

  CWE-451google chrome
• 中CVE-2026-14031CVSSスコア 4.32026/06/30

  Inappropriate implementation in File Input in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

  CWE-451google chromeapple macoslinux linux_kernel
• 中CVE-2026-14030CVSSスコア 4.22026/06/30

  Inappropriate implementation in SplitView in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium securi

  CWE-451google chromelinux linux_kernel
• 中CVE-2026-14028CVSSスコア 4.22026/06/30

  Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

  CWE-451google chromeapple iphone_os
• 中CVE-2026-14026CVSSスコア 4.22026/06/30

  Incorrect security UI in SplitView in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

  CWE-451google chromeapple macoslinux linux_kernel
• 中CVE-2026-14014CVSSスコア 6.52026/06/30

  Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chrome
• 中CVE-2026-14013CVSSスコア 4.32026/06/30

  Inappropriate implementation in SVG in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chrome
• 中CVE-2026-14002CVSSスコア 6.52026/06/30

  Inappropriate implementation in Geolocation in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chrome
• 中CVE-2026-13998CVSSスコア 4.22026/06/30

  Incorrect security UI in File Input in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chromeapple macos
• 中CVE-2026-13997CVSSスコア 4.22026/06/30

  Incorrect security UI in Extensions in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chromegoogle android
• 中CVE-2026-13996CVSSスコア 6.52026/06/30

  Inappropriate implementation in Permissions in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chrome
• 中CVE-2026-13994CVSSスコア 4.32026/06/30

  Inappropriate implementation in Credential Management in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chromegoogle android
• 中CVE-2026-13993CVSSスコア 4.22026/06/30

  Incorrect security UI in WebAppInstalls in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform domain spoofing via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chromeapple macoslinux linux_kernel
• 中CVE-2026-13992CVSSスコア 4.22026/06/30

  Inappropriate implementation in UI in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chromeapple macos
• 中CVE-2026-13989CVSSスコア 5.32026/06/30

  Inappropriate implementation in PageInfo in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chrome
• 中CVE-2026-13988CVSSスコア 6.52026/06/30

  Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chrome
• 中CVE-2026-13987CVSSスコア 4.32026/06/30

  Incorrect security UI in Mobile in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chromegoogle android
• 中CVE-2026-13986CVSSスコア 4.22026/06/30

  Inappropriate implementation in Media UI in Google Chrome on ChromeOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chromegoogle chrome_os
• 中CVE-2026-13985CVSSスコア 6.52026/06/30

  Inappropriate implementation in MediaCapture in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

  CWE-290CWE-451google chrome
• 中CVE-2026-13984CVSSスコア 4.32026/06/30

  Incorrect security UI in TabStrip in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

  CWE-290CWE-451google chrome
• 中CVE-2026-13983CVSSスコア 4.22026/06/30

  Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium sec

  CWE-451google chromeapple iphone_os
• 低CVE-2026-13982CVSSスコア 3.12026/06/30

  Incorrect security UI in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chrome
• 中CVE-2026-13981CVSSスコア 4.32026/06/30

  Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chromeapple iphone_os
• 中CVE-2026-13980CVSSスコア 4.32026/06/30

  Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chromeapple iphone_os
• 中CVE-2026-13979CVSSスコア 4.32026/06/30

  Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chrome
• 中CVE-2026-13978CVSSスコア 4.32026/06/30

  Insufficient policy enforcement in PageInfo in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chrome
• 中CVE-2026-13973CVSSスコア 4.22026/06/30

  Inappropriate implementation in UI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chromeapple macoslinux linux_kernel
• 中CVE-2026-13972CVSSスコア 4.32026/06/30

  Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chrome
• 中CVE-2026-13966CVSSスコア 4.32026/06/30

  Inappropriate implementation in History in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chrome
• 中CVE-2026-13960CVSSスコア 4.32026/06/30

  Inappropriate implementation in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chrome
• 中CVE-2026-13956CVSSスコア 4.22026/06/30

  Incorrect security UI in PageInfo in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chrome
• 低CVE-2026-13948CVSSスコア 3.12026/06/30

  Insufficient policy enforcement in Extensions in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension. (Chromium security severity: Medium)

  CWE-451google chrome
• 低CVE-2026-13945CVSSスコア 3.12026/06/30

  Insufficient policy enforcement in Extensions in Google Chrome on Linux prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension. (Chromium security severity: Medium)

  CWE-451google chromelinux linux_kernel
• 中CVE-2026-13941CVSSスコア 4.32026/06/30

  Inappropriate implementation in SiteSettings in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chromegoogle android
• 中CVE-2026-13916CVSSスコア 4.32026/06/30

  Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chromeapple iphone_os
• 中CVE-2026-13912CVSSスコア 4.32026/06/30

  Inappropriate implementation in Safe Browsing in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chromeapple iphone_os
• 中CVE-2026-13907CVSSスコア 4.22026/06/30

  Inappropriate implementation in iOSWeb in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chromeapple iphone_os
• 中CVE-2026-13902CVSSスコア 4.32026/06/30

  Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chromeapple iphone_os
• 中CVE-2026-13895CVSSスコア 4.22026/06/30

  Inappropriate implementation in Autofill in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

  CWE-451google chrome
• 中CVE-2026-13892CVSSスコア 6.52026/06/30

  Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: Mediu

  CWE-451google chromeapple iphone_os