cwe-451

  1. CVE-2025-9865: Chrome 140 Fixes Android UI Toolbar Spoofing

    Google's Chromium team has fixed a medium-severity UI spoofing flaw—tracked as CVE-2025-9865—that existed in the browser's Toolbar implementation and could allow domain spoofing on Android when a user performed specific UI gestures on crafted pages. Background Chromium's September 2025 security...
  2. CVE-2025-49736: Edge for Android UI Spoofing — Impact & Patch Guide

    CVE-2025-49736 — Microsoft Edge (Chromium) for Android: UI‑spoofing / “UI performs the wrong action” vulnerability A deep-dive explainer, impact assessment, and practical mitigation checklist Summary Microsoft’s Security Update Guide lists CVE‑2025‑49736 as affecting Microsoft Edge...
  3. Edge on Android CVE-2025-49755: UI Spoofing Risk and Mitigation

    Microsoft’s Security Response Center has published an advisory for CVE-2025-49755, a user‑interface (UI) misrepresentation — spoofing — vulnerability affecting Microsoft Edge (Chromium‑based) on Android devices, a flaw that allows a remote attacker to present misleading or falsified UI elements...