Missing User Interaction for Potentially Unsafe Action

Every one of the 34 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Microsoft Outlook Spoofing VulnerabilityCVE-2026-124194Microsoft · CVSS 6.5 · 1.6% likelycovered by CyberSIXT

   Microsoft15 articles15 articles this week: Microsoft fixes Outlook flaw exploited to steal authentication data

2. It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could be used to execute arbitrary macros bundled with a documen…CVE-2018-16858Libreoffice · CVSS 7.8 · 67% likely

   Libreoffice

3. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender SafePay 23.0.10.34. User interaction is required to exploit this vu…CVE-2019-6737Bitdefender · CVSS 8.8 · 3.8% likely

   Bitdefender

4. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender SafePay 23.0.10.34. User interaction is required to exploit this vu…CVE-2019-6738Bitdefender · CVSS 8.8 · 3.7% likely

   Bitdefender

5. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender SafePay 23.0.10.34. User interaction is required to exploit this vu…CVE-2019-6736Bitdefender · CVSS 8.8 · 3.7% likely

   Bitdefender

6. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Xiaomi Browser Prior to 10.4.0. User interaction is required to exploit this vu…CVE-2019-13322Xiaomi · CVSS 7.5 · 2.6% likely

   Xiaomi

7. This vulnerability allows remote attackers redirect users to an external resource on affected installations of Tencent WeChat Prior to 7.0.9. User interaction is required to explo…CVE-2019-17151Tencent · CVSS 4.3 · 1.4% likely

   Tencent

8. Issue that bypasses the "Mark of the Web" security warning function for files when opening a symbolic link that points to an executable file exists in WinRAR versions prior to 7.1…CVE-2025-31334RARLAB · CVSS 6.8 · 1.3% likely

   Rarlab

9. Metabase vulnerable to arbitrary SQL execution from queryhashCVE-2022-39362metabase · CVSS 8.8 · 1.0% likely

   Metabase

10. Graphic on-click binding allows unchecked script executionCVE-2024-3044The Document Foundation · CVSS 6.5 · 1.0% likely

    The Document Foundation

11. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Inductive Automation Ignition 8.1.15 (b2022030114). User interaction is required…CVE-2022-35873Inductive Automation · CVSS 7.8 · 0.7% likely

    Inductive Automation

12. Microsoft Office Security Feature Bypass VulnerabilityCVE-2026-119998Microsoft · CVSS 6.5 · 0.7% likely

    Microsoft

13. This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 20.0 Build: 4201.2111.1802.0000 Service Pack 2. User interaction is re…CVE-2022-36970AVEVA · CVSS 7.8 · 0.7% likely

    AVEVA

14. The permission prompt input delay could expire while the window is not in focus. This makes it vulnerable to clickjacking by malicious websites. This vulnerability affects Firefox…CVE-2024-2609Mozilla · CVSS 6.1 · 0.6% likely

    Mozilla

15. NI Vision Builder AI VBAI File Processing Missing Warning Remote Code Execution VulnerabilityCVE-2025-2450NI · CVSS 7.8 · 0.5% likely

    NI

16. JavaScript Execution via Spoofed PDF Attachment and file:/// LinkCVE-2025-3909Mozilla · CVSS 8.1 · 0.5% likely

    Mozilla

17. Microsoft Edge for iOS Spoofing VulnerabilityCVE-2024-30057Microsoft · CVSS 5.4 · 0.4% likely

    Microsoft

18. A vulnerability in ReadA version 1.1.0.2 and previous allows an authorized user with access to a privileged account on a BD Kiestra system (Kiestra TLA, Kiestra WCA, and InoqulA+…CVE-2018-10595Becton, Dickinson and Company · 0.4% likely

    Becton Dickinson & Co

19. Epiphany: insecure external protocol invocation in epiphanyCVE-2025-3839CVSS 8 · 0.4% likely
20. Xmind Attachment Insufficient UI Warning Remote Code Execution VulnerabilityCVE-2026-0777Xmind · CVSS 7.8 · 0.4% likely
21. A vulnerability in DB Manager version 3.0.1.0 and previous and PerformA version 3.0.0.0 and previous allows an authorized user with access to a privileged account on a BD Kiestra…CVE-2018-10593Becton, Dickinson and Company · 0.4% likely

    Becton Dickinson & Co

22. PDFsam Enhanced Launch Insufficient UI Warning Remote Code Execution VulnerabilityCVE-2025-14403PDFsam · CVSS 7.8 · 0.3% likely

    PDFsam

23. Zed does not show Parameter Values for MCP Tool Calls. Users cannot detect tool poisoning.CVE-2026-25805zed-industries · CVSS 6.4 · 0.3% likely

    Zed-Industries

24. PDFsam Enhanced XLS File Insufficient UI Warning Remote Code Execution VulnerabilityCVE-2025-14404PDFsam · CVSS 7 · 0.3% likely

    PDFsam

25. PDFsam Enhanced DOC File Insufficient UI Warning Remote Code Execution VulnerabilityCVE-2025-14402PDFsam · CVSS 7 · 0.3% likely

    PDFsam

26. Soda PDF Desktop Launch Insufficient UI Warning Remote Code Execution VulnerabilityCVE-2025-14415Soda PDF · CVSS 7 · 0.3% likely

    Soda PDF

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.