Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Medium5.4UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page.CVE-2026-106368 · google · chrome · CVE.org · FIRST EPSS · NIST NVD · chromeEPSS 0.2%Oct 6, 2026
Medium5.4User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.CVE-2026-33119 · Microsoft · Microsoft Edge for Android · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · android, microsoftEPSS 0.4%Apr 10, 2026
Medium5.3User interface (ui) misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.CVE-2025-64667 · microsoft · exchange server · CVE.org · FIRST EPSS · NIST NVD · microsoftEPSS 0.8%Dec 9, 2025
High8.8Microsoft Windows MSHTML Platform Spoofing VulnerabilityCVE-2024-43461 · microsoft · windows 10 1507 · CISA KEV · CVE.org · FIRST EPSS · microsoftKEVEPSS 54.5%Sep 10, 2024
High7.5Microsoft Windows MSHTML Platform Spoofing VulnerabilityCVE-2024-38112 · microsoft · windows 10 1507 · CISA KEV · CVE.org · FIRST EPSS · microsoftKEVEPSS 84.2%Jul 9, 2024