Vulnerabilities (CVE)

Filtered by CWE-451
Total 434 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-17747 1 Google 2 Android, Chrome 2026-10-24 N/A 4.2 MEDIUM
Insufficient validation of untrusted input in Payments in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17755 1 Google 1 Chrome 2026-10-24 N/A 4.3 MEDIUM
Incorrect security UI in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension. (Chromium security severity: Medium)
CVE-2026-17793 1 Google 2 Android, Chrome 2026-10-23 N/A 6.5 MEDIUM
Inappropriate implementation in Messages in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17840 1 Google 1 Chrome 2026-10-23 N/A 6.5 MEDIUM
Incorrect security UI in Passwords in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17849 2 Apple, Google 2 Iphone Os, Chrome 2026-10-23 N/A 4.3 MEDIUM
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via malicious network traffic. (Chromium security severity: Medium)
CVE-2026-17828 2 Apple, Google 2 Iphone Os, Chrome 2026-10-23 N/A 6.5 MEDIUM
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17812 1 Google 1 Chrome 2026-10-23 N/A 5.4 MEDIUM
Inappropriate implementation in DigitalCredentials in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17874 2 Apple, Google 2 Iphone Os, Chrome 2026-10-23 N/A 5.4 MEDIUM
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17819 1 Google 1 Chrome 2026-10-23 N/A 6.5 MEDIUM
Inappropriate implementation in WebAppInstalls in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17835 2 Apple, Google 2 Iphone Os, Chrome 2026-10-23 N/A 6.5 MEDIUM
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17838 2 Apple, Google 2 Iphone Os, Chrome 2026-10-23 N/A 6.5 MEDIUM
Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17792 1 Google 1 Chrome 2026-10-23 N/A 6.5 MEDIUM
Inappropriate implementation in Credential Management in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17839 2 Apple, Google 2 Iphone Os, Chrome 2026-10-23 N/A 6.5 MEDIUM
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-17782 2 Apple, Google 2 Iphone Os, Chrome 2026-10-23 N/A 4.3 MEDIUM
Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-18006 1 Google 1 Chrome 2026-10-23 N/A 4.3 MEDIUM
Inappropriate implementation in Google Lens in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-18013 2 Apple, Google 2 Iphone Os, Chrome 2026-10-23 N/A 4.3 MEDIUM
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-18008 1 Google 1 Chrome 2026-10-23 N/A 4.3 MEDIUM
Inappropriate implementation in Settings in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via malicious network traffic. (Chromium security severity: Low)
CVE-2026-17972 2 Apple, Google 2 Iphone Os, Chrome 2026-10-23 N/A 4.3 MEDIUM
Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-17964 1 Google 2 Android, Chrome 2026-10-23 N/A 4.3 MEDIUM
Incorrect security UI in UI in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-17958 1 Google 1 Chrome 2026-10-23 N/A 4.3 MEDIUM
Inappropriate implementation in Views in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)