CVE Intelligence
Home / CVEs

CVE Database

Published vulnerabilities with severity, known exploitation and official sources.

Severity
Clear

297 result(s)

Export this search: RSS · CSV · STIX
CVE-2026-109346 High · 8.1 CWE-451 Oct 12, 2026
better-auth 1.3.8-beta.3 before 1.7.0-rc.3 Device Authorization Phishing via /device
better-auth from 1.3.8-beta.3 before 1.7.0-rc.3 contains a UI misrepresentation vulnerability in the deviceAuthorization plugin because GET /device omits the requesting client_id and scope. Attackers can start a device request via /device/code, trick signed-in users into approving the code, then redeem it at /device/token for a live session token.
CVE-2026-106380 Medium · 5.4 CWE-451 Oct 6, 2026
UI misrepresentation in UI in Google Chrome prior to 155.0.8059.39 allowed a remote…
UI misrepresentation in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-106368 Medium · 5.4 CWE-451 Oct 6, 2026
UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote...
UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-106338 Medium · 5.4 CWE-451 Oct 6, 2026
UI misrepresentation in PictureInPicture in Google Chrome on on Android prior to…
UI misrepresentation in PictureInPicture in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-106337 Medium · 5.4 CWE-451 Oct 6, 2026
UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed…
UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-106317 Medium · 5.4 CWE-451 Oct 6, 2026
UI misrepresentation in FullScreen in Google Chrome on on Android prior to 155.0.8059.39…
UI misrepresentation in FullScreen in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-106316 Medium · 5.4 CWE-451 Oct 6, 2026
UI misrepresentation in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39…
UI misrepresentation in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. (Chromium security severity: Low)
CVE-2026-106305 Medium · 5.4 CWE-451 Oct 6, 2026
UI misrepresentation in Mobile in Google Chrome on on Android prior to 155.0.8059.39…
UI misrepresentation in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-106302 Medium · 5.4 CWE-451 Oct 6, 2026
UI misrepresentation in PermissionElement in Google Chrome prior to 155.0.8059.39…
UI misrepresentation in PermissionElement in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-106285 Medium · 5.4 CWE-451 Oct 6, 2026
UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a…
UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-106282 Medium · 5.4 CWE-451 Oct 6, 2026
UI misrepresentation in WebOTP in Google Chrome prior to 155.0.8059.39 allowed a remote…
UI misrepresentation in WebOTP in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-106276 Medium · 5.4 CWE-451 Oct 6, 2026
UI misrepresentation in Payments in Google Chrome prior to 155.0.8059.39 allowed a…
UI misrepresentation in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-106272 Medium · 5.4 CWE-451 Oct 6, 2026
UI misrepresentation in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39…
UI misrepresentation in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially spoof UI elements via crafted network traffic. (Chromium security severity: Low)
CVE-2026-106265 Medium · 5.4 CWE-451 Oct 6, 2026
UI misrepresentation in File in Google Chrome prior to 155.0.8059.39 allowed a remote…
UI misrepresentation in File in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-106251 Medium · 5.4 CWE-451 Oct 6, 2026
UI misrepresentation in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39…
UI misrepresentation in Chromoting in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. (Chromium security severity: Low)
CVE-2026-106236 Medium · 5.4 CWE-451 Oct 6, 2026
UI misrepresentation in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39…
UI misrepresentation in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. (Chromium security severity: Low)
CVE-2026-106232 Medium · 5.4 CWE-451 Oct 6, 2026
UI misrepresentation in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote…
UI misrepresentation in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-106229 Medium · 5.4 CWE-451 Oct 6, 2026
UI misrepresentation in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a…
UI misrepresentation in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-106209 Medium · 5.4 CWE-451 Oct 6, 2026
UI misrepresentation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed…
UI misrepresentation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof address bar via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-106182 Medium · 5.4 CWE-451 Oct 6, 2026
UI misrepresentation in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote…
UI misrepresentation in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Medium)
CVE-2026-106179 Medium · 5.4 CWE-451 Oct 6, 2026
UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a…
UI misrepresentation in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-105043 Low · 3.6 CWE-451 Oct 2, 2026
MathWorks Simulink before R2026b, when showing a crafted .slx file, can have blocks that…
MathWorks Simulink before R2026b, when showing a crafted .slx file, can have blocks that are never visible in the Simulink Editor but will cause code execution.
CVE-2026-102314 Medium · 5.4 CWE-451 Sep 29, 2026
UI misrepresentation in TabStrip in Google Chrome prior to 154.0.8037.92 allowed a…
UI misrepresentation in TabStrip in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)
CVE-2026-102312 Medium · 4.3 CWE-451 Sep 29, 2026
UI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.8037.92…
UI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: High)
CVE-2026-102305 Medium · 5.4 CWE-451 Sep 29, 2026
UI misrepresentation in SignIn in Google Chrome on on iOS prior to 154.0.8037.92 allowed…
UI misrepresentation in SignIn in Google Chrome on on iOS prior to 154.0.8037.92 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)