CWE-357 · Other weaknesses
Insufficient UI Warning of Dangerous Operations
24CVEs
SortMost likely exploited
24 CVEs with CWE-357 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2019-13521A maliciously crafted program file opened by an unsuspecting user of Rockwell Automation Arena Simulation Software version 16.00.00 and earlier may result in the limited exposure…Rockwell · Rockwell Automation Arena Simulation Software · 2020-01-27 | – | 5.6% | 2020-01-27 |
| CVE-2021-22645Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10…Luxion · Luxion KeyShot · 2021-02-23 | – | 1.6% | 2021-02-23 |
| CVE-2025-33054Remote Desktop Spoofing VulnerabilityMicrosoft · Windows 11 version 22H2 · CVSS 8.1 · 2025-07-08 | 8.1 | 1.0% | 2025-07-08 |
| CVE-2024-29057Microsoft Edge (Chromium-based) Spoofing VulnerabilityMicrosoft · Microsoft Edge (Chromium-based) · CVSS 4.3 · 2024-03-22 | 4.3 | 1.0% | 2024-03-22 |
| CVE-2025-49582XWiki's required right warnings for macros are incompletexwiki · xwiki-platform · CVSS 8.6 · 2025-06-13 | 8.6 | 1.0% | 2025-06-13 |
| CVE-2026-26151Remote Desktop Spoofing VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 7.1 · 2026-04-14 | 7.1 | 0.9% | 2026-04-14 |
| CVE-2024-26188Microsoft Edge (Chromium-based) Spoofing VulnerabilityMicrosoft · Microsoft Edge for Android · CVSS 4.3 · 2024-02-23 | 4.3 | 0.8% | 2024-02-23 |
| CVE-2024-43505Microsoft Office Visio Remote Code Execution VulnerabilityMicrosoft · Microsoft 365 Apps for Enterprise · CVSS 7.8 · 2024-10-08 | 7.8 | 0.7% | 2024-10-08 |
| CVE-2024-21387Microsoft Edge for Android Spoofing VulnerabilityMicrosoft · Microsoft Edge (Chromium-based) · CVSS 5.3 · 2024-01-26 | 5.3 | 0.7% | 2024-01-26 |
| CVE-2026-58597Microsoft Edge (Chromium-based) Spoofing VulnerabilityMicrosoft · Microsoft Edge (Chromium-based) · CVSS 4.3 · 2026-07-03 | 4.3 | 0.7% | 2026-07-03 |
| CVE-2024-49054Microsoft Edge (Chromium-based) Spoofing VulnerabilityMicrosoft · Microsoft Edge (Chromium-based) · CVSS 4.3 · 2024-11-22 | 4.3 | 0.6% | 2024-11-22 |
| CVE-2024-21336Microsoft Edge (Chromium-based) Spoofing VulnerabilityMicrosoft · Microsoft Edge (Chromium-based) · CVSS 2.5 · 2024-01-26 | 2.5 | 0.5% | 2024-01-26 |
| CVE-2022-41904Element iOS is vulnerable due to missing decoration for events decrypted with untrusted Megolm sessionsvector-im · element-ios · CVSS 6.4 · 2022-11-11 | 6.4 | 0.5% | 2022-11-11 |
| CVE-2025-49587XWiki does not require right warnings for notification displayer objectsxwiki · xwiki-platform · CVSS 6.4 · 2025-06-13 | 6.4 | 0.5% | 2025-06-13 |
| CVE-2025-49585XWiki does not require right warnings for XClass definitionsxwiki · xwiki-platform · CVSS 8.6 · 2025-06-13 | 8.6 | 0.5% | 2025-06-13 |
| CVE-2024-43580Microsoft Edge (Chromium-based) Spoofing VulnerabilityMicrosoft · Microsoft Edge (Chromium-based) · CVSS 5.4 · 2024-10-17 | 5.4 | 0.4% | 2024-10-17 |
| CVE-2024-30058Microsoft Edge (Chromium-based) Spoofing VulnerabilityMicrosoft · Microsoft Edge (Chromium-based) · CVSS 5.4 · 2024-06-13 | 5.4 | 0.4% | 2024-06-13 |
| CVE-2025-47967Microsoft Edge (Chromium-based) for Android Spoofing VulnerabilityMicrosoft · Microsoft Edge (Chromium-based) · CVSS 4.7 · 2025-09-16 | 4.7 | 0.4% | 2025-09-16 |
| CVE-2026-123839In JetBrains IntelliJ IDEA before 2026.3 opening arbitrary URLs without confirmation was possible via the Remote Development port forwarding modelJetBrains · IntelliJ IDEA · CVSS 4.7 · 2026-11-06 | 4.7 | 0.3% | 2026-11-06 |
| CVE-2026-126198pgEdge Postgres MCP Server custom tools performed writes without user confirmationpgEdge · pgedge-postgres-mcp · CVSS 3.1 · 2026-11-12 | 3.1 | 0.3% | 2026-11-12 |
| CVE-2026-126199pgEdge Postgres MCP Server write confirmation skipped for writes that begin with a reading keywordpgEdge · pgedge-postgres-mcp · CVSS 6.8 · 2026-11-12 | 6.8 | 0.2% | 2026-11-12 |
| CVE-2026-123320In JetBrains Toolbox App before 3.9 insufficient warning in the login dialog allowed connecting to a malicious serverJetBrains · Toolbox App · CVSS 3.1 · 2026-11-06 | 3.1 | 0.1% | 2026-11-06 |
| CVE-2026-47782Android App "RoboForm Password Manager" provided by Siber Systems, Inc. handles Android intents without sufficient URL validation, user confirmation nor notification. If a URL to…Siber Systems, Inc. · Android App "RoboForm Password Manager" · CVSS 4.6 · 2026-05-20 | 4.6 | 0.1% | 2026-05-20 |
| CVE-2026-59082A vulnerability has been identified in SIMATIC WinCC V7.5 (All versions), SIMATIC WinCC V8.0 (All versions), SIMATIC WinCC V8.1 (All versions). Affected devices implicitly execute…Siemens · SIMATIC WinCC V7.5 · CVSS 7.8 · 2026-11-10 | 7.8 | 0.1% | 2026-11-10 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.