Insufficient UI Warning of Dangerous Operations

Every one of the 24 is a mark on the map. Named now: 1 to 24, most at risk first.

1. A maliciously crafted program file opened by an unsuspecting user of Rockwell Automation Arena Simulation Software version 16.00.00 and earlier may result in the limited exposure…CVE-2019-13521Rockwell · 5.6% likely

   Rockwell

2. Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10…CVE-2021-22645Luxion · 1.6% likely

   Luxion

3. Remote Desktop Spoofing VulnerabilityCVE-2025-33054Microsoft · CVSS 8.1 · 1.0% likely

   Microsoft

4. Microsoft Edge (Chromium-based) Spoofing VulnerabilityCVE-2024-29057Microsoft · CVSS 4.3 · 1.0% likely

   Microsoft

5. XWiki's required right warnings for macros are incompleteCVE-2025-49582xwiki · CVSS 8.6 · 1.0% likely

   Xwiki

6. Remote Desktop Spoofing VulnerabilityCVE-2026-26151Microsoft · CVSS 7.1 · 0.9% likely

   Microsoft

7. Microsoft Edge (Chromium-based) Spoofing VulnerabilityCVE-2024-26188Microsoft · CVSS 4.3 · 0.8% likely

   Microsoft

8. Microsoft Office Visio Remote Code Execution VulnerabilityCVE-2024-43505Microsoft · CVSS 7.8 · 0.7% likely

   Microsoft

9. Microsoft Edge for Android Spoofing VulnerabilityCVE-2024-21387Microsoft · CVSS 5.3 · 0.7% likely

   Microsoft

10. Microsoft Edge (Chromium-based) Spoofing VulnerabilityCVE-2026-58597Microsoft · CVSS 4.3 · 0.7% likely

    Microsoft

11. Microsoft Edge (Chromium-based) Spoofing VulnerabilityCVE-2024-49054Microsoft · CVSS 4.3 · 0.6% likely

    Microsoft

12. Microsoft Edge (Chromium-based) Spoofing VulnerabilityCVE-2024-21336Microsoft · CVSS 2.5 · 0.5% likely

    Microsoft

13. Element iOS is vulnerable due to missing decoration for events decrypted with untrusted Megolm sessionsCVE-2022-41904vector-im · CVSS 6.4 · 0.5% likely
14. XWiki does not require right warnings for notification displayer objectsCVE-2025-49587xwiki · CVSS 6.4 · 0.5% likely

    Xwiki

15. XWiki does not require right warnings for XClass definitionsCVE-2025-49585xwiki · CVSS 8.6 · 0.5% likely

    Xwiki

16. Microsoft Edge (Chromium-based) Spoofing VulnerabilityCVE-2024-43580Microsoft · CVSS 5.4 · 0.4% likely

    Microsoft

17. Microsoft Edge (Chromium-based) Spoofing VulnerabilityCVE-2024-30058Microsoft · CVSS 5.4 · 0.4% likely

    Microsoft

18. Microsoft Edge (Chromium-based) for Android Spoofing VulnerabilityCVE-2025-47967Microsoft · CVSS 4.7 · 0.4% likely

    Microsoft

19. In JetBrains IntelliJ IDEA before 2026.3 opening arbitrary URLs without confirmation was possible via the Remote Development port forwarding modelCVE-2026-123839JetBrains · CVSS 4.7 · 0.3% likely

    JetBrains

20. pgEdge Postgres MCP Server custom tools performed writes without user confirmationCVE-2026-126198pgEdge · CVSS 3.1 · 0.3% likely

    pgEdge

21. pgEdge Postgres MCP Server write confirmation skipped for writes that begin with a reading keywordCVE-2026-126199pgEdge · CVSS 6.8 · 0.2% likely

    pgEdge

22. In JetBrains Toolbox App before 3.9 insufficient warning in the login dialog allowed connecting to a malicious serverCVE-2026-123320JetBrains · CVSS 3.1 · 0.1% likely

    JetBrains

23. Android App "RoboForm Password Manager" provided by Siber Systems, Inc. handles Android intents without sufficient URL validation, user confirmation nor notification. If a URL to…CVE-2026-47782Siber Systems, Inc. · CVSS 4.6 · 0.1% likely
24. A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions), SIMATIC WinCC V8.1 (All versions). Affected devices implicitly execute…CVE-2026-59082Siemens · CVSS 7.8 · 0.1% likely

    Siemens

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.