CWE-451 vulnerabilities

144 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	6.5	EPSS 0.3%	CVE-2026-13985Google Chrome · Inappropriate Implementation Medium6.5EPSS 0.3%2026-06-30CVE Database V5CVE-2026-13985 Inappropriate implementation in MediaCapture in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.3%Vulnerability CWE-451	CVE Database V5	2026-06-30
Medium	4.3	EPSS 0.2%	CVE-2026-13984Google Chrome · Incorrect Security UI Medium4.3EPSS 0.2%2026-06-30CVE Database V5CVE-2026-13984 Incorrect security UI in TabStrip in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.2%Vulnerability CWE-451	CVE Database V5	2026-06-30
Medium	4.2	EPSS 0.2%	CVE-2026-13983Google Chrome · Incorrect Security UI Medium4.2EPSS 0.2%2026-06-30CVE Database V5CVE-2026-13983 Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.2%Vulnerability CWE-451	CVE Database V5	2026-06-30
Low	3.1	EPSS 0.2%	CVE-2026-13982Google Chrome · Incorrect Security UI Low3.1EPSS 0.2%2026-06-30CVE Database V5CVE-2026-13982 Incorrect security UI in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.2%Vulnerability CWE-451	CVE Database V5	2026-06-30
Medium	4.3	EPSS 0.2%	CVE-2026-13981Google Chrome · Inappropriate Implementation Medium4.3EPSS 0.2%2026-06-30CVE Database V5CVE-2026-13981 Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.2%Vulnerability CWE-451	CVE Database V5	2026-06-30
Medium	4.3	EPSS 0.2%	CVE-2026-13980Google Chrome · Incorrect Security UI Medium4.3EPSS 0.2%2026-06-30CVE Database V5CVE-2026-13980 Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.2%Vulnerability CWE-451	CVE Database V5	2026-06-30
Medium	4.3	EPSS 0.2%	CVE-2026-13979Google Chrome · Inappropriate Implementation Medium4.3EPSS 0.2%2026-06-30CVE Database V5CVE-2026-13979 Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.2%Vulnerability CWE-451	CVE Database V5	2026-06-30
Medium	4.3	EPSS 0.2%	CVE-2026-13978Google Chrome · Insufficient Policy Enforcement Medium4.3EPSS 0.2%2026-06-30CVE Database V5CVE-2026-13978 Insufficient policy enforcement in PageInfo in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.2%Vulnerability CWE-451	CVE Database V5	2026-06-30
Medium	4.2	EPSS 0.2%	CVE-2026-13973Google Chrome · Inappropriate Implementation Medium4.2EPSS 0.2%2026-06-30CVE Database V5CVE-2026-13973 Inappropriate implementation in UI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.2%Vulnerability CWE-451	CVE Database V5	2026-06-30
Medium	4.3	EPSS 0.2%	CVE-2026-13972Google Chrome · Inappropriate Implementation Medium4.3EPSS 0.2%2026-06-30CVE Database V5CVE-2026-13972 Inappropriate implementation in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.2%Vulnerability CWE-451	CVE Database V5	2026-06-30
Medium	4.3	EPSS 0.2%	CVE-2026-13966Google Chrome · Inappropriate Implementation Medium4.3EPSS 0.2%2026-06-30CVE Database V5CVE-2026-13966 Inappropriate implementation in History in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.2%Vulnerability CWE-451	CVE Database V5	2026-06-30
Medium	4.3	EPSS 0.2%	CVE-2026-13960Google Chrome · Inappropriate Implementation Medium4.3EPSS 0.2%2026-06-30CVE Database V5CVE-2026-13960 Inappropriate implementation in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.2%Vulnerability CWE-451	CVE Database V5	2026-06-30
Medium	4.2	EPSS 0.2%	CVE-2026-13956Google Chrome · Incorrect Security UI Medium4.2EPSS 0.2%2026-06-30CVE Database V5CVE-2026-13956 Incorrect security UI in PageInfo in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.2%Vulnerability CWE-451	CVE Database V5	2026-06-30
Low	3.1	EPSS 0.2%	CVE-2026-13948Google Chrome · Insufficient Policy Enforcement Low3.1EPSS 0.2%2026-06-30CVE Database V5CVE-2026-13948 Insufficient policy enforcement in Extensions in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension. (Chromium security severity: Medium) EPSS 0.2%Vulnerability CWE-451	CVE Database V5	2026-06-30
Low	3.1	EPSS 0.2%	CVE-2026-13945Google Chrome · Insufficient Policy Enforcement Low3.1EPSS 0.2%2026-06-30CVE Database V5CVE-2026-13945 Insufficient policy enforcement in Extensions in Google Chrome on Linux prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension. (Chromium security severity: Medium) EPSS 0.2%Vulnerability CWE-451	CVE Database V5	2026-06-30
Medium	4.3	EPSS 0.2%	CVE-2026-13941Google Chrome · Inappropriate Implementation Medium4.3EPSS 0.2%2026-06-30CVE Database V5CVE-2026-13941 Inappropriate implementation in SiteSettings in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.2%Vulnerability CWE-451	CVE Database V5	2026-06-30
Medium	4.3	EPSS 0.2%	CVE-2026-13916Google Chrome · Inappropriate Implementation Medium4.3EPSS 0.2%2026-06-30CVE Database V5CVE-2026-13916 Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.2%Vulnerability CWE-451	CVE Database V5	2026-06-30
Medium	4.3	EPSS 0.2%	CVE-2026-13912Google Chrome · Incorrect Security UI Medium4.3EPSS 0.2%2026-06-30CVE Database V5CVE-2026-13912 Inappropriate implementation in Safe Browsing in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.2%Vulnerability CWE-451	CVE Database V5	2026-06-30
Medium	4.2	EPSS 0.2%	CVE-2026-13907Google Chrome · Inappropriate Implementation Medium4.2EPSS 0.2%2026-06-30CVE Database V5CVE-2026-13907 Inappropriate implementation in iOSWeb in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.2%Vulnerability CWE-451	CVE Database V5	2026-06-30
Medium	4.3	EPSS 0.2%	CVE-2026-13902Google Chrome · Inappropriate Implementation Medium4.3EPSS 0.2%2026-06-30CVE Database V5CVE-2026-13902 Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) EPSS 0.2%Vulnerability CWE-451	CVE Database V5	2026-06-30

Page 5 of 8