Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

Tenable Research

CERT/CC

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The ui performs the wrong action in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network.

CVE-2025-49736 is a vulnerability identified in Microsoft Edge for Android version 1.0.0, classified under CWE-449, which relates to the user interface performing incorrect actions. This flaw allows an unauthorized attacker to perform spoofing attacks over a network by exploiting the UI logic error. Specifically, the UI may misrepresent or misdirect user actions, causing users to unknowingly execute unintended commands or navigate to malicious content. The vulnerability does not require any privileges or authentication but does require user interaction, such as clicking or tapping on UI elements. The CVSS v3.1 base score is 4.3, indicating medium severity, with the vector string AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C. This means the attack can be launched remotely over the network with low attack complexity, no privileges required, but user interaction is necessary. The impact primarily affects the integrity of user actions, with no direct impact on confidentiality or availability. No known exploits have been reported in the wild as of the publication date (August 12, 2025). The vulnerability is currently unpatched, and no patch links are available yet. The issue arises from improper UI behavior that can mislead users into performing actions they did not intend, potentially enabling attackers to spoof legitimate UI elements or commands. This can facilitate phishing or social engineering attacks within the browser context on Android devices.

Detailed information about CVE-2025-49736: CWE-449: The UI Performs the Wrong Action in Microsoft Microsoft Edge for Android affecting Microsoft Microsoft Edge 

CVE-2025-49736: CWE-449: The UI Performs the Wrong Action in Microsoft Microsoft Edge for Android - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-49736: CWE-449: The UI Performs the Wrong Action in Microsoft Microsoft Edge for Android

Microsoft Edge (Chromium-based) Spoofing Vulnerability

CVE-2025-21404 is a vulnerability classified under CWE-449 (Improper Control of UI Consistency) and CWE-451 (User Interface Misrepresentation) affecting Microsoft Edge (Chromium-based) version 1.0.0.0. This vulnerability allows the browser's user interface to perform incorrect actions, which can lead to spoofing attacks where users are tricked into believing they are interacting with legitimate UI elements while the browser executes different commands. The flaw arises from improper handling of UI elements, causing a mismatch between user expectations and actual browser behavior. The CVSS 3.1 score of 4.3 indicates a medium severity with an attack vector of network (AV:N), low attack complexity (AC:L), no privileges required (PR:N), but requiring user interaction (UI:R). The impact is limited to integrity (I:L) with no confidentiality or availability loss. The vulnerability is publicly disclosed but currently has no known exploits in the wild and no patches released. This suggests that while the vulnerability is recognized, exploitation is non-trivial and may require social engineering to induce user interaction. The lack of patches means organizations must rely on interim mitigations until an official fix is available. Given Microsoft Edge's widespread use in enterprise and consumer environments, this vulnerability could be leveraged in targeted phishing or social engineering campaigns to mislead users into executing unintended actions, potentially leading to further compromise or data manipulation.

Detailed information about CVE-2025-21404: CWE-449: The UI Performs the Wrong Action in Microsoft Microsoft Edge (Chromium-based) affecting Microsoft Microsoft 

CVE-2025-21404: CWE-449: The UI Performs the Wrong Action in Microsoft Microsoft Edge (Chromium-based) - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-21404: CWE-449: The UI Performs the Wrong Action in Microsoft Microsoft Edge (Chromium-based)

CVE-2024-43577 is a medium severity spoofing vulnerability in Microsoft Edge (Chromium-based) where the user interface performs the wrong action. This issue is classified under CWE-449, indicating a UI logic flaw that could mislead users. An official fix is available from Microsoft to address this vulnerability.

This vulnerability in Microsoft Edge (Chromium-based) involves the user interface performing an incorrect action, potentially leading to spoofing attacks. The flaw is identified as CWE-449, which relates to UI logic errors causing unintended behavior. The CVSS 3.1 base score is 4.3 (medium severity), with network attack vector, low attack complexity, no privileges required, user interaction required, and impact limited to integrity loss. Microsoft has released an official fix for this issue.

Detailed information about CVE-2024-43577: CWE-449: The UI Performs the Wrong Action in Microsoft Microsoft Edge (Chromium-based) affecting Microsoft Microsoft 

CWE-449: The UI Performs the Wrong Action in Microsoft Microsoft Edge (Chromium-based) (CVE-2024-43577) - Live Threat Intelligence - Threat Radar | OffSeq.com


CVE-2025-49736: CWE-449: The UI Performs the Wrong Action in Microsoft Microsoft Edge for AndroidCVE-2025-49736 0 The ui performs the wrong action in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network. MediumVulnerabilityGermanyFranceUnited Kingdom+4#cve #cve-2025-49736 #cwe-449 Join the discussion	CVE Database V5	08/12/2025, 17:10:48 UTC Added: 08/12/2025, 17:18:01 UTC
CVE-2025-21404: CWE-449: The UI Performs the Wrong Action in Microsoft Microsoft Edge (Chromium-based)CVE-2025-21404 0 Microsoft Edge (Chromium-based) Spoofing Vulnerability MediumVulnerabilityGermanyFranceUnited Kingdom+3#cve #cve-2025-21404 #cwe-449 Join the discussion	CVE Database V5	02/06/2025, 22:41:28 UTC Added: 12/17/2025, 22:30:27 UTC
CVE-2024-43577: CWE-449: The UI Performs the Wrong Action in Microsoft Microsoft Edge (Chromium-based)CVE-2024-43577 0 CVE-2024-43577 is a medium severity spoofing vulnerability in Microsoft Edge (Chromium-based) where the user interface performs the wrong action. This issue is classified under CWE-449, indicating a UI logic flaw that could mislead users. An official fix is available from Microsoft to address this vulnerability. MediumVulnerability#gcve #cve-2024-43577 #cwe-449 Join the discussion	GCVE Database	10/18/2024, 22:14:41 UTC Added: 06/09/2026, 19:18:40 UTC

Threats Tagged 'cwe-449'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cwe-449'

Lead Pen Test Professional