CWE-451
506 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 2 of them as exploited in the wild.
- Published CVEs
- 506
- Last 12 months
- 388
- Critical
- 11
- Known exploited
- 2
Critical 11High 86Medium 383Low 23Not scored 3
CVEs per yearBy the year they were published
- 20175
- 20206
- 20212
- 202214
- 20235
- 202434
- 202572
- 2026368
Known exploitedNewest addition to KEV first
- CVE-2024-43461
Windows MSHTML Platform Spoofing Vulnerability
Microsoft · Windows 10 Version 1507
ExploitedHigh8.8 - CVE-2024-38112
Windows MSHTML Platform Spoofing Vulnerability
Microsoft · Windows 10 Version 22H2
ExploitedHigh7.5
Newest CVEs
- CVE-2026-123995
Hisense VIDAA Smart TV SSRF via SetAVTransportURI CurrentURI
Hisense · VIDAA
Medium4.8 - CVE-2026-121045
UI misrepresentation in Browser in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements…
Google · Chrome
Medium5.4 - CVE-2026-121162
UI misrepresentation in Notifications in Google Chrome on on Windows prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI…
Google · Chrome
Medium5.4 - CVE-2026-121081
UI misrepresentation in Passwords in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to obtain sensitive…
Google · Chrome
Medium5.9 - CVE-2026-121121
UI misrepresentation in PageInfo in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium…
Google · Chrome
Medium5.4 - CVE-2026-121206
UI misrepresentation in Isolated in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements via a…
Google · Chrome
Medium5.4 - CVE-2026-121165
UI misrepresentation in Mobile in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI…
Google · Chrome
Medium5.4 - CVE-2026-121043
UI misrepresentation in Payments in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements via a…
Google · Chrome
Medium5.4 - CVE-2026-121190
UI misrepresentation in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements via a…
Google · Chrome
Not scored - CVE-2026-121053
UI misrepresentation in Transactions Platform in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to…
Google · Chrome
Medium5.4