CWE-356

33 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 0High 22Medium 10Low 1Not scored 0

CVEs per yearBy the year they were published

CVE-2026-28593
In getItemList of SettingsFragment.java, there is a possible user interaction bypass due to misleading or insufficient UI. This could lead to local escalation…
Google · Android
High7.8
CVE-2026-0777
Xmind Attachment Insufficient UI Warning Remote Code Execution Vulnerability
Xmind · Xmind
High7.8
CVE-2026-25805
Zed does not show Parameter Values for MCP Tool Calls. Users cannot detect tool poisoning.
zed-industries · zed
Medium6.4
CVE-2025-3839
Epiphany: insecure external protocol invocation in epiphany
epiphany
High8.0
CVE-2025-14414
Soda PDF Desktop Word File Insufficient UI Warning Remote Code Execution Vulnerability
Soda PDF · Desktop
High7.8
CVE-2025-14415
Soda PDF Desktop Launch Insufficient UI Warning Remote Code Execution Vulnerability
Soda PDF · Desktop
High7.0
CVE-2025-14412
Soda PDF Desktop XLS File Insufficient UI Warning Remote Code Execution Vulnerability
Soda PDF · Desktop
High7.8
CVE-2025-14418
pdfforge PDF Architect XLS File Insufficient UI Warning Remote Code Execution Vulnerability
pdfforge · PDF Architect
High7.0
CVE-2025-14417
pdfforge PDF Architect Launch Insufficient UI Warning Remote Code Execution Vulnerability
pdfforge · PDF Architect
High7.8
CVE-2025-14416
pdfforge PDF Architect DOC File Insufficient UI Warning Remote Code Execution Vulnerability
pdfforge · PDF Architect
High7.0