Início / CVEs
Base de CVEs
Vulnerabilidades publicadas, com severidade, exploração conhecida e fontes oficiais.
CVE-2026-109346
Alta · 8.1
CWE-451 12/10/2026
better-auth 1.3.8-beta.3 before 1.7.0-rc.3 Device Authorization Phishing via /device
better-auth from 1.3.8-beta.3 before 1.7.0-rc.3 contains a UI misrepresentation vulnerability in the deviceAuthorization plugin because GET /device omits the requesting client_id and scope. Attackers can start a device request via /device/code, trick signed-in users into approving the code, then redeem it at /device/token for a live session token.
CVE-2026-106380
Média · 5.4
CWE-451 06/10/2026
UI misrepresentation in UI in Google Chrome prior to 155.0.8059.39 allowed a remote…
UI misrepresentation in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-106368
Média · 5.4
CWE-451 06/10/2026
UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote...
UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-106338
Média · 5.4
CWE-451 06/10/2026
UI misrepresentation in PictureInPicture in Google Chrome on on Android prior to…
UI misrepresentation in PictureInPicture in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-106337
Média · 5.4
CWE-451 06/10/2026
UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed…
UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-106317
Média · 5.4
CWE-451 06/10/2026
UI misrepresentation in FullScreen in Google Chrome on on Android prior to 155.0.8059.39…
UI misrepresentation in FullScreen in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-106316
Média · 5.4
CWE-451 06/10/2026
UI misrepresentation in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39…
UI misrepresentation in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. (Chromium security severity: Low)
CVE-2026-106305
Média · 5.4
CWE-451 06/10/2026
UI misrepresentation in Mobile in Google Chrome on on Android prior to 155.0.8059.39…
UI misrepresentation in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-106302
Média · 5.4
CWE-451 06/10/2026
UI misrepresentation in PermissionElement in Google Chrome prior to 155.0.8059.39…
UI misrepresentation in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-106285
Média · 5.4
CWE-451 06/10/2026
UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a…
UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-106282
Média · 5.4
CWE-451 06/10/2026
UI misrepresentation in WebOTP in Google Chrome prior to 155.0.8059.39 allowed a remote…
UI misrepresentation in WebOTP in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-106276
Média · 5.4
CWE-451 06/10/2026
UI misrepresentation in Payments in Google Chrome prior to 155.0.8059.39 allowed a…
UI misrepresentation in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-106272
Média · 5.4
CWE-451 06/10/2026
UI misrepresentation in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39…
UI misrepresentation in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially spoof UI elements via crafted network traffic. (Chromium security severity: Low)
CVE-2026-106265
Média · 5.4
CWE-451 06/10/2026
UI misrepresentation in File in Google Chrome prior to 155.0.8059.39 allowed a remote…
UI misrepresentation in File in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-106251
Média · 5.4
CWE-451 06/10/2026
UI misrepresentation in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39…
UI misrepresentation in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. (Chromium security severity: Low)
CVE-2026-106236
Média · 5.4
CWE-451 06/10/2026
UI misrepresentation in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39…
UI misrepresentation in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. (Chromium security severity: Low)
CVE-2026-106232
Média · 5.4
CWE-451 06/10/2026
UI misrepresentation in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote…
UI misrepresentation in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-106229
Média · 5.4
CWE-451 06/10/2026
UI misrepresentation in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a…
UI misrepresentation in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-106209
Média · 5.4
CWE-451 06/10/2026
UI misrepresentation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed…
UI misrepresentation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof address bar via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-106182
Média · 5.4
CWE-451 06/10/2026
UI misrepresentation in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote…
UI misrepresentation in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-106179
Média · 5.4
CWE-451 06/10/2026
UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a…
UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-105043
Baixa · 3.6
CWE-451 02/10/2026
MathWorks Simulink before R2026b, when showing a crafted .slx file, can have blocks that…
MathWorks Simulink before R2026b, when showing a crafted .slx file, can have blocks that are never visible in the Simulink Editor but will cause code execution.
CVE-2026-100822
Média · 5.4
CWE-451 29/09/2026
Spoofing issue in the Networking: HTTP component
Spoofing issue in the Networking: HTTP component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
CVE-2026-13948
Baixa · 3.1
CWE-451 30/06/2026
Insufficient policy enforcement in Extensions in Google Chrome prior to 150.0.7871.47…
Insufficient policy enforcement in Extensions in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension. (Chromium security severity: Medium)
CVE-2026-13945
Baixa · 3.1
CWE-451 30/06/2026
Insufficient policy enforcement in Extensions in Google Chrome on Linux prior to…
Insufficient policy enforcement in Extensions in Google Chrome on Linux prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension. (Chromium security severity: Medium)