ui misrepresentation

Google logged CVE-2026-14134 on June 30, 2026, as a low-severity Chrome for Android Autofill flaw fixed before version 150.0.7871.47, where a crafted HTML page could let a remote attacker spoof part of the browser’s user interface. The National Vulnerability Database entry is still undergoing...

Google Chrome on Android before version 150.0.7871.47 is affected by CVE-2026-13941, a medium-severity SiteSettings flaw published June 30, 2026, that can let a remote attacker spoof browser UI through a crafted HTML page. The bug is not a code-execution headline grabber, but it lands in one of...

Microsoft has assigned CVE‑2025‑64667 to a newly recorded Microsoft Exchange Server vulnerability classified as a spoofing / UI misrepresentation issue; the MSRC entry and CVE aggregators show the advisory was published on December 9, 2025 and currently carries a medium severity (CVSS 3.1 ~5.3)...

BusyBox’s tar utility has been assigned CVE‑2025‑46394 after researchers showed a crafted TAR archive can hide filenames from a listing by embedding terminal escape sequences in member names — a quiet but meaningful risk that can mislead users, obfuscate malicious payloads, and complicate...