CWE-356
33 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 33Published CVEs33 of them scored
- 13Last 12 monthspublished in the last year
- 0Critical22 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-28593
In getItemList of SettingsFragment.java, there is a possible user interaction bypass due to misleading or insufficient UI. This could lead to local escalation…
Google · Android
High7.8 - CVE-2026-0777
Xmind Attachment Insufficient UI Warning Remote Code Execution Vulnerability
Xmind · Xmind
High7.8 - CVE-2026-25805
Zed does not show Parameter Values for MCP Tool Calls. Users cannot detect tool poisoning.
zed-industries · zed
Medium6.4 - CVE-2025-3839
Epiphany: insecure external protocol invocation in epiphany
epiphany
High8.0 - CVE-2025-14414
Soda PDF Desktop Word File Insufficient UI Warning Remote Code Execution Vulnerability
Soda PDF · Desktop
High7.8 - CVE-2025-14415
Soda PDF Desktop Launch Insufficient UI Warning Remote Code Execution Vulnerability
Soda PDF · Desktop
High7.0 - CVE-2025-14412
Soda PDF Desktop XLS File Insufficient UI Warning Remote Code Execution Vulnerability
Soda PDF · Desktop
High7.8 - CVE-2025-14418
pdfforge PDF Architect XLS File Insufficient UI Warning Remote Code Execution Vulnerability
pdfforge · PDF Architect
High7.0 - CVE-2025-14417
pdfforge PDF Architect Launch Insufficient UI Warning Remote Code Execution Vulnerability
pdfforge · PDF Architect
High7.8 - CVE-2025-14416
pdfforge PDF Architect DOC File Insufficient UI Warning Remote Code Execution Vulnerability
pdfforge · PDF Architect
High7.0