CWE-451 vulnerabilities

144 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	4.3	EPSS 0.2%	CVE-2026-14077Google Chrome · Incorrect Security UI Medium4.3EPSS 0.2%2026-06-30CVE Database V5CVE-2026-14077 Inappropriate implementation in Select in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Low) EPSS 0.2%Vulnerability CWE-451	CVE Database V5	2026-06-30
Medium	4.3	EPSS 0.2%	CVE-2026-14072Google Chrome · Incorrect Security UI Medium4.3EPSS 0.2%2026-06-30CVE Database V5CVE-2026-14072 Inappropriate implementation in SplitView in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) EPSS 0.2%Vulnerability CWE-451	CVE Database V5	2026-06-30
Medium	4.3	EPSS 0.2%	CVE-2026-14042Google Chrome · Inappropriate Implementation Medium4.3EPSS 0.2%2026-06-30CVE Database V5CVE-2026-14042 Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) EPSS 0.2%Vulnerability CWE-451	CVE Database V5	2026-06-30
Medium	4.3	EPSS 0.2%	CVE-2026-14031Google Chrome · Incorrect Security UI Medium4.3EPSS 0.2%2026-06-30CVE Database V5CVE-2026-14031 Inappropriate implementation in File Input in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) EPSS 0.2%Vulnerability CWE-451	CVE Database V5	2026-06-30
Medium	4.2	EPSS 0.2%	CVE-2026-14030Google Chrome · Incorrect Security UI Medium4.2EPSS 0.2%2026-06-30CVE Database V5CVE-2026-14030 Inappropriate implementation in SplitView in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Low) EPSS 0.2%Vulnerability CWE-451	CVE Database V5	2026-06-30
Medium	4.2	EPSS 0.2%	CVE-2026-14028Google Chrome · Incorrect Security UI Medium4.2EPSS 0.2%2026-06-30CVE Database V5CVE-2026-14028 Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) EPSS 0.2%Vulnerability CWE-451	CVE Database V5	2026-06-30
Medium	4.2	EPSS 0.2%	CVE-2026-14026Google Chrome · Incorrect Security UI Medium4.2EPSS 0.2%2026-06-30CVE Database V5CVE-2026-14026 Incorrect security UI in SplitView in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) EPSS 0.2%Vulnerability CWE-451	CVE Database V5	2026-06-30
Medium	6.5	EPSS 0.3%	CVE-2026-14014Google Chrome · Inappropriate Implementation Medium6.5EPSS 0.3%2026-06-30CVE Database V5CVE-2026-14014 Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.3%Vulnerability CWE-451	CVE Database V5	2026-06-30
Medium	4.3	EPSS 0.2%	CVE-2026-14013Google Chrome · Inappropriate Implementation Medium4.3EPSS 0.2%2026-06-30CVE Database V5CVE-2026-14013 Inappropriate implementation in SVG in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.2%Vulnerability CWE-451	CVE Database V5	2026-06-30
Medium	6.5	EPSS 0.3%	CVE-2026-14002Google Chrome · Inappropriate Implementation Medium6.5EPSS 0.3%2026-06-30CVE Database V5CVE-2026-14002 Inappropriate implementation in Geolocation in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.3%Vulnerability CWE-451	CVE Database V5	2026-06-30
Medium	4.2	EPSS 0.2%	CVE-2026-13998Google Chrome · Incorrect Security UI Medium4.2EPSS 0.2%2026-06-30CVE Database V5CVE-2026-13998 Incorrect security UI in File Input in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.2%Vulnerability CWE-451	CVE Database V5	2026-06-30
Medium	4.2	EPSS 0.2%	CVE-2026-13997Google Chrome · Incorrect Security UI Medium4.2EPSS 0.2%2026-06-30CVE Database V5CVE-2026-13997 Incorrect security UI in Extensions in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.2%Vulnerability CWE-451	CVE Database V5	2026-06-30
Medium	6.5	EPSS 0.3%	CVE-2026-13996Google Chrome · Incorrect Security UI Medium6.5EPSS 0.3%2026-06-30CVE Database V5CVE-2026-13996 Inappropriate implementation in Permissions in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.3%Vulnerability CWE-451	CVE Database V5	2026-06-30
Medium	4.3	EPSS 0.2%	CVE-2026-13994Google Chrome · Inappropriate Implementation Medium4.3EPSS 0.2%2026-06-30CVE Database V5CVE-2026-13994 Inappropriate implementation in Credential Management in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.2%Vulnerability CWE-451	CVE Database V5	2026-06-30
Medium	4.2	EPSS 0.2%	CVE-2026-13993Google Chrome · Incorrect Security UI Medium4.2EPSS 0.2%2026-06-30CVE Database V5CVE-2026-13993 Incorrect security UI in WebAppInstalls in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform domain spoofing via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.2%Vulnerability CWE-451	CVE Database V5	2026-06-30
Medium	4.2	EPSS 0.2%	CVE-2026-13992Google Chrome · Inappropriate Implementation Medium4.2EPSS 0.2%2026-06-30CVE Database V5CVE-2026-13992 Inappropriate implementation in UI in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.2%Vulnerability CWE-451	CVE Database V5	2026-06-30
Medium	6.5	EPSS 0.3%	CVE-2026-13989Google Chrome · Insufficient Policy Enforcement Medium6.5EPSS 0.3%2026-06-30CVE Database V5CVE-2026-13989 Inappropriate implementation in PageInfo in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.3%Vulnerability CWE-451	CVE Database V5	2026-06-30
Medium	6.5	EPSS 0.3%	CVE-2026-13988Google Chrome · Inappropriate Implementation Medium6.5EPSS 0.3%2026-06-30CVE Database V5CVE-2026-13988 Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.3%Vulnerability CWE-451	CVE Database V5	2026-06-30
Medium	4.3	EPSS 0.2%	CVE-2026-13987Google Chrome · Incorrect Security UI Medium4.3EPSS 0.2%2026-06-30CVE Database V5CVE-2026-13987 Incorrect security UI in Mobile in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.2%Vulnerability CWE-451	CVE Database V5	2026-06-30
Medium	4.2	EPSS 0.2%	CVE-2026-13986Google Chrome · Inappropriate Implementation Medium4.2EPSS 0.2%2026-06-30CVE Database V5CVE-2026-13986 Inappropriate implementation in Media UI in Google Chrome on ChromeOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.2%Vulnerability CWE-451	CVE Database V5	2026-06-30

Page 4 of 8