CWE-356
CVEs classified under CWE-356, newest first.
3 CVEsRSS
CVE-2026-28593High· 7.8In getItemList of SettingsFragment.java, there is a possible user interaction bypass due to misleading or insufficient UI
In getItemList of SettingsFragment.java, there is a possible user interaction bypass due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction …
▾ Twilightgoogle · androidEPSS 0.10%via NVD
CVE-2025-58335Medium· 5.5In JetBrains Junie before 252.284.66, 251.284.66, 243.284.66, 252.284.61, 251.284.61, 243.284.61, 252.284.50, 252.284.54, 251.284.54, 251.284.50, 243.284.54, 243.284.50 information disclosure was possible via search_project function
In JetBrains Junie before 252.284.66, 251.284.66, 243.284.66, 252.284.61, 251.284.61, 243.284.61, 252.284.50, 252.284.54, 251.284.54, 251.284.50, 243.284.54, 243.284.50 information disclosure was possible via search_project function
▾ Sunlitjetbrains · junieEPSS 0.22%via NVD
CVE-2024-30057Medium· 5.4Microsoft Edge for iOS Spoofing Vulnerability
Microsoft Edge for iOS Spoofing Vulnerability
▾ Sunlitmicrosoft · edgeEPSS 0.41%via NVD