CWE-449 The UI Performs the Wrong Action
baseThe UI performs the wrong action with respect to the user's request.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (21)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-3155US | high7.8OT elevated | — | ||
When saving or opening an email attachment on macOS, Thunderbird did not set attribute com.apple.quarantine on the received file. If the received file was an application and the us… | ||||
| CVE-2024-1547US | medium6.5 | — | ||
Through a series of API calls and redirects, an attacker-controlled alert dialog could have been displayed on another website (with the victim website's URL shown). This vulnerabil… | ||||
| CVE-2023-43585US | medium6.5 | — | ||
Improper access control in Zoom Mobile App for iOS and Zoom SDKs for iOS before version 5.16.5 may allow an authenticated user to conduct a disclosure of information via network ac… | ||||
| CVE-2023-43588US | medium6.5 | — | ||
Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information disclosure via network access. | ||||
| CVE-2023-39215US | medium6.5 | — | ||
Improper authentication in Zoom clients may allow an authenticated user to conduct a denial of service via network access. | ||||
| CVE-2023-39209US | medium6.5 | — | ||
Improper input validation in Zoom Desktop Client for Windows before 5.15.5 may allow an authenticated user to enable an information disclosure via network access. | ||||
| CVE-2023-36535US | medium6.5 | — | ||
Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow an authenticated user to enable information disclosure via network access. | ||||
| CVE-2023-0616US | medium6.5 | — | ||
If a MIME email combines OpenPGP and OpenPGP MIME data in a certain way Thunderbird repeatedly attempts to process and display the message, which could cause Thunderbird's user int… | ||||
| CVE-2025-26643US | medium5.4 | — | ||
The UI performs the wrong action in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. | ||||
| CVE-2024-24698US | medium4.4 | — | ||
Improper authentication in some Zoom clients may allow a privileged user to conduct a disclosure of information via local access. | ||||
| CVE-2022-3034US | medium4.3 | — | ||
When receiving an HTML email that specified to load an <code>iframe</code> element from a remote location, a request to the remote document was sent. However, Thunderbird didn't di… | ||||
| CVE-2023-34414US | low3.1 | — | ||
The error page for sites with invalid TLS certificates was missing the
activation-delay Firefox uses to protect prompts and permission dialogs
from attacks that exploit human respo… | ||||
| CVE-2025-13637US | — | — | ||
Inappropriate implementation in Downloads in Google Chrome prior to 143.0.7499.41 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass downloa… | ||||
| CVE-2025-56139US | — | — | ||
LinkedIn Mobile Application for Android version 4.1.1087.2 fails to update link preview metadata (image, title, description) when a user replaces the original URL in a post or comm… | ||||
| CVE-2025-49736US | — | — | ||
The ui performs the wrong action in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network. | ||||
| CVE-2025-21404US | — | — | ||
Microsoft Edge (Chromium-based) Spoofing Vulnerability | ||||
| CVE-2024-49041US | — | — | ||
Microsoft Edge (Chromium-based) Spoofing Vulnerability | ||||
| CVE-2024-43577US | — | — | ||
Microsoft Edge (Chromium-based) Spoofing Vulnerability | ||||
| CVE-2024-38083US | — | — | ||
Microsoft Edge (Chromium-based) Spoofing Vulnerability | ||||
| CVE-2024-2611US | — | — | ||
A missing delay on when pointer lock was used could have allowed a malicious page to trick a user into granting permissions. This vulnerability affects Firefox < 124, Firefox ESR <… | ||||
03
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan