CWE-449 · Input Validation and Logic
The UI Performs the Wrong Action
14CVEs
SortMost likely exploited
14 CVEs with CWE-449 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2023-36535Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow an authenticated user to enable information disclosure via network access.Zoom Video Communications, Inc. · Zoom Clients · CVSS 7.1 · 2023-08-08 | 7.1 | 1.2% | 2023-08-08 |
| CVE-2023-39215Improper authentication in Zoom clients may allow an authenticated user to conduct a denial of service via network access.Zoom Video Communications, Inc. · Zoom Clients · CVSS 7.1 · 2023-09-12 | 7.1 | 1.1% | 2023-09-12 |
| CVE-2025-21404Microsoft Edge (Chromium-based) Spoofing VulnerabilityMicrosoft · Microsoft Edge (Chromium-based) · CVSS 4.3 · 2025-02-06 | 4.3 | 1.1% | 2025-02-06 |
| CVE-2024-49041Microsoft Edge (Chromium-based) Spoofing VulnerabilityMicrosoft · Microsoft Edge (Chromium-based) · CVSS 4.3 · 2024-12-06 | 4.3 | 1.0% | 2024-12-06 |
| CVE-2023-39209Improper input validation in Zoom Desktop Client for Windows before 5.15.5 may allow an authenticated user to enable an information disclosure via network access.Zoom Video Communications, Inc. · Zoom Desktop Client for Windows · CVSS 5.9 · 2023-08-08 | 5.9 | 1.0% | 2023-08-08 |
| CVE-2025-26643Microsoft Edge (Chromium-based) Spoofing VulnerabilityMicrosoft · Microsoft Edge (Chromium-based) · CVSS 5.4 · 2025-03-07 | 5.4 | 0.7% | 2025-03-07 |
| CVE-2023-43588Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information disclosure via network access.Zoom Video Communications, Inc. · Zoom Clients · CVSS 3.5 · 2023-11-14 | 3.5 | 0.7% | 2023-11-14 |
| CVE-2025-49736Microsoft Edge (Chromium-based) for Android Spoofing VulnerabilityMicrosoft · Microsoft Edge for Android · CVSS 4.3 · 2025-08-12 | 4.3 | 0.6% | 2025-08-12 |
| CVE-2023-43585Improper access control in Zoom Mobile App for iOS and Zoom SDKs for iOS before version 5.16.5 may allow an authenticated user to conduct a disclosure of information via network a…Zoom Video Communications, Inc. · Zoom Mobile App for iOS and SDKs for iOS · CVSS 7.1 · 2023-12-13 | 7.1 | 0.6% | 2023-12-13 |
| CVE-2024-24698Zoom Clients - Improper AuthenticationZoom Video Communications, Inc. · Zoom Clients · CVSS 4.9 · 2024-02-13 | 4.9 | 0.5% | 2024-02-13 |
| CVE-2024-38083Microsoft Edge (Chromium-based) Spoofing VulnerabilityMicrosoft · Microsoft Edge for Android · CVSS 4.3 · 2024-06-13 | 4.3 | 0.5% | 2024-06-13 |
| CVE-2024-43577Microsoft Edge (Chromium-based) Spoofing VulnerabilityMicrosoft · Microsoft Edge (Chromium-based) · CVSS 4.3 · 2024-10-18 | 4.3 | 0.5% | 2024-10-18 |
| CVE-2025-56139LinkedIn Mobile Application for Android version 4.1.1087.2 fails to update link preview metadata (image, title, description) when a user replaces the original URL in a post or com…Linkedin · Linkedin · CVSS 5.3 · 2025-09-03 | 5.3 | 0.3% | 2025-09-03 |
| CVE-2025-13637Inappropriate implementation in Downloads in Google Chrome prior to 143.0.7499.41 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass downlo…Google · Chrome · CVSS 4.3 · 2025-12-02 | 4.3 | 0.3% | 2025-12-02 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.