CWE-357

22 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 0High 7Medium 13Low 2Not scored 0

CVEs per yearBy the year they were published

CVE-2026-123839
In JetBrains IntelliJ IDEA before 2026.3 opening arbitrary URLs without confirmation was possible via the Remote Development port forwarding model
JetBrains · IntelliJ IDEA
Medium4.7
CVE-2026-123320
In JetBrains Toolbox App before 3.9 insufficient warning in the login dialog allowed connecting to a malicious server
JetBrains · Toolbox App
Low3.1
CVE-2026-58597
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft · Microsoft Edge (Chromium-based)
Medium4.3
CVE-2026-47782
Android App "RoboForm Password Manager" provided by Siber Systems, Inc. handles Android intents without sufficient URL validation, user confirmation nor…
Siber Systems, Inc. · Android App "RoboForm Password Manager"
Medium4.6
CVE-2026-26151
Remote Desktop Spoofing Vulnerability
Microsoft · Windows 10 Version 1607
High7.1
CVE-2025-47967
Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
Microsoft · Microsoft Edge (Chromium-based)
Medium4.7
CVE-2025-33054
Remote Desktop Spoofing Vulnerability
Microsoft · Windows 11 version 22H2
High8.1
CVE-2025-49587
XWiki does not require right warnings for notification displayer objects
xwiki · xwiki-platform
Medium6.4
CVE-2025-49585
XWiki does not require right warnings for XClass definitions
xwiki · xwiki-platform
High8.6
CVE-2025-49583
XWiki provides no warning when granting XWiki.Notifications.Code.NotificationEmailRendererClass admin right
xwiki · xwiki-platform
Medium5.1