Início / CVEs
Base de CVEs
Vulnerabilidades publicadas, com severidade, exploração conhecida e fontes oficiais.
CVE-2026-87559
Média · 4.2
CWE-451 08/09/2026
UI misrepresentation in UI in Google Chrome prior to 153.0.8010.36 allowed a remote…
UI misrepresentation in UI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87507
Média · 5.4
CWE-451 08/09/2026
UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a…
UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87501
Média · 5.4
CWE-451 08/09/2026
UI misrepresentation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a…
UI misrepresentation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87496
Média · 5.4
CWE-451 08/09/2026
UI misrepresentation in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote…
UI misrepresentation in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87484
Média · 5.4
CWE-451 08/09/2026
UI misrepresentation in Geometry in Google Chrome prior to 153.0.8010.36 allowed a…
UI misrepresentation in Geometry in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87462
Média · 5.4
CWE-451 08/09/2026
UI misrepresentation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote…
UI misrepresentation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87458
Média · 5.4
CWE-451 08/09/2026
UI misrepresentation in Geometry in Google Chrome prior to 153.0.8010.36 allowed a…
UI misrepresentation in Geometry in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-87445
Média · 5.4
CWE-451 08/09/2026
UI misrepresentation in Session in Google Chrome prior to 153.0.8010.36 allowed a remote…
UI misrepresentation in Session in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-86853
Média · 4.3
CWE-451 08/09/2026
Repeated external URL scheme launches could potentially cause a denial of service in Firefox for iOS
A malicious webpage could repeatedly trigger external URL schemes, causing system prompts or external application launches. This could make Firefox for iOS temporarily unusable until the page is closed. This vulnerability was fixed in Firefox for iOS 155.1.
CVE-2025-52652
Baixa · 3.5
CWE-451 07/09/2026
HCL MyXalytics is affected by multiple security vulnerabilities.
HCL MyXalytics was affected by Content Spoofing Vulnerability. It may allow an attacker to manipulate displayed content, making it appear as though it originates from a trusted source, potentially leading to phishing or data theft.
CVE-2026-63020
Baixa · 3.1
CWE-451 02/09/2026
BIG-IP Configuration utility vulnerability
A vulnerability exists in an undisclosed BIG-IP Configuration utility page that may allow an attacker to spoof error messages
Impact:
An attacker may trick authenticated BIG-IP users
into accessing malicious links and reflect a spoofed error message in
the victim's BIG-IP Configuration utility web browser session. This is a
control plane issue; there is no data plane exposure.
Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVE-2026-84356
Média · 4.3
CWE-451 01/09/2026
UI misrepresentation in FullScreen in Google Chrome prior to 152.0.7977.75 allowed a…
UI misrepresentation in FullScreen in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-84330
Média · 5.4
CWE-451 01/09/2026
UI misrepresentation in FullScreen in Google Chrome on on Android prior to 152.0.7977.75…
UI misrepresentation in FullScreen in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-81267
Média · 5.4
CWE-451 31/08/2026
Stalled popup navigation could allow address bar origin spoofing in Firefox for iOS
A malicious webpage could stall a popup's cross-origin navigation after commit, causing the address bar to display the destination origin while continuing to render attacker-controlled content. This vulnerability was fixed in Firefox for iOS 155.0.
CVE-2026-79284
Média · 4.3
CWE-451 25/08/2026
UI misrepresentation in Core in Google Chrome on on Mac prior to 152.0.7977.65 allowed a…
UI misrepresentation in Core in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-79283
Média · 5.4
CWE-451 25/08/2026
UI misrepresentation in Geometry in Google Chrome prior to 152.0.7977.65 allowed a…
UI misrepresentation in Geometry in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79250
Média · 5.4
CWE-451 25/08/2026
UI misrepresentation in Navigation in Google Chrome prior to 152.0.7977.65 allowed a…
UI misrepresentation in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79233
Média · 4.3
CWE-451 25/08/2026
UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65…
UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-79204
Média · 5.4
CWE-451 25/08/2026
UI misrepresentation in Input in Google Chrome on on Mac prior to 152.0.7977.65 allowed…
UI misrepresentation in Input in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79180
Média · 5.4
CWE-451 25/08/2026
UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65…
UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79176
Média · 6.5
CWE-451 25/08/2026
UI misrepresentation in Extensions in Google Chrome prior to 152.0.7977.65 allowed a…
UI misrepresentation in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. (Chromium security severity: Medium)
CVE-2026-79173
Média · 5.4
CWE-451 25/08/2026
UI misrepresentation in WebAppInstalls in Google Chrome prior to 152.0.7977.65 allowed a…
UI misrepresentation in WebAppInstalls in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-79108
Média · 6.5
CWE-451 25/08/2026
UI misrepresentation in Web Authentication (Passkeys & Security Keys) in Google Chrome…
UI misrepresentation in Web Authentication (Passkeys & Security Keys) in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-79098
Média · 4.3
CWE-451 25/08/2026
UI misrepresentation in PermissionElement in Google Chrome prior to 152.0.7977.65…
UI misrepresentation in PermissionElement in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-79022
Média · 4.3
CWE-451 25/08/2026
UI misrepresentation in Transactions Platform in Google Chrome prior to 152.0.7977.65…
UI misrepresentation in Transactions Platform in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially spoof UI elements via a crafted HTML page. (Chromium security severity: Low)