Insufficient Visual Distinction of Homoglyphs Presented to User

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. base-x homograph attack allows Unicode lookalike characters to bypass validation.CVE-2025-27611cryptocoinjs · CVSS 8.7 · 0.4% likely
2. If a domain name contained a RTL character, it would cause the domain to be rendered to the right of the path. This could lead to user confusion and spoofing attacks. <br>*This bu…CVE-2021-4221Mozilla · CVSS 4.3 · 0.4% likely

   Mozilla

3. Inappropriate implementation in Browser UI in Google Chrome on Android prior to 133.0.6943.98 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafte…CVE-2025-0996Google · CVSS 5.4 · 0.4% likely

   Google

4. Symfony: HtmlSanitizer URL Parser Deny Gates Underinclusive: Percent-Encoded BiDi Marks and Unicode Whitespace Bypass Visual-Spoofing DefenseCVE-2026-48760symfony · CVSS 5.3 · 0.3% likely

   Symfony

5. Symfony: HtmlSanitizer URL Attributes Pass Through BiDi Override Characters → Visual href SpoofingCVE-2026-45064symfony · CVSS 2.3 · 0.3% likely

   Symfony

6. Addressable display_uri can show misleading hosts with invalid Punycode A-labelsCVE-2026-126348sporkmonger · CVSS 4.3 · 0.3% likely

   Sporkmonger

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.