Skip to content
CVE Tracker

CWE-451

498 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 2 of them as exploited in the wild.

All 498 in the listAtom feed of new CVEsWhat CWE-451 is, at MITRE (opens in a new tab)
Published CVEs
498
Last 12 months
384
Critical
10
Known exploited
2

Critical 10High 81Medium 365Low 23Not scored 19

CVEs per yearBy the year they were published

  1. 20171
  2. 20174
  3. 20207
  4. 202211
  5. 20225
  6. 20249
  7. 202537
  8. 2026353
  9. 202670
  10. 20261

Known exploitedNewest addition to KEV first

  • CVE-2024-43461

    Windows MSHTML Platform Spoofing Vulnerability

    Microsoft · Windows 10 Version 1507

    ExploitedHigh8.8
  • CVE-2024-38112

    Windows MSHTML Platform Spoofing Vulnerability

    Microsoft · Windows 10 Version 22H2

    ExploitedHigh7.5

Newest CVEs

  • CVE-2026-121045

    UI misrepresentation in Browser in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements…

    Google · Chrome

    Not scored
  • CVE-2026-121162

    UI misrepresentation in Notifications in Google Chrome on on Windows prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI…

    Google · Chrome

    Not scored
  • CVE-2026-121081

    UI misrepresentation in Passwords in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to obtain sensitive…

    Google · Chrome

    Not scored
  • CVE-2026-121121

    UI misrepresentation in PageInfo in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium…

    Google · Chrome

    Not scored
  • CVE-2026-121206

    UI misrepresentation in Isolated in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements via a…

    Google · Chrome

    Not scored
  • CVE-2026-121165

    UI misrepresentation in Mobile in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI…

    Google · Chrome

    Not scored
  • CVE-2026-121043

    UI misrepresentation in Payments in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements via a…

    Google · Chrome

    Not scored
  • CVE-2026-121190

    UI misrepresentation in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements via a…

    Google · Chrome

    Not scored
  • CVE-2026-121053

    UI misrepresentation in Transactions Platform in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to…

    Google · Chrome

    Not scored
  • CVE-2026-121209

    UI misrepresentation in Input in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium…

    Google · Chrome

    Not scored

Vendors it comes up for most

  1. Google335
  2. Mozilla41
  3. Microsoft32
  4. Apple11
  5. LINE Corporation4
  6. GitHub3
  7. IBM3
  8. OpenClaw3
  9. cryptomator3
  10. DocuSign2