CVEbaza.pl › CWE Dictionary › CWE-1007

Common Weakness Enumeration

CWE-1007

Insufficient Visual Distinction of Homoglyphs Presented to User

Category: BaseCVE: 3

Description

The product displays information or identifiers to a user, but the display mechanism does not make it easy for the user to distinguish between visually similar or identical glyphs (homoglyphs), which may cause the user to misinterpret a glyph and perform an unintended, insecure action.

CVE vulnerabilities with CWE-1007 (3)

8.7

CVSS

HIGH

CVE-2025-27611

base-x is a base encoder and decoder of any given alphabet using bitcoin style leading zero compression. Versions 4.0.0, 5.0.0, and all prior to 3.0.11, are vulnerable to attackers potentially deceiving users into sending funds to an unintended address. This issue has been patched in versions 3.0.11, 4.0.1, and 5.0.1.

pub. 2025-04-30

5.4

CVSS

MEDIUM

CVE-2025-0996

Inappropriate implementation in Browser UI in Google Chrome on Android prior to 133.0.6943.98 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: High)

pub. 2025-02-15

4.3

CVSS

MEDIUM

CVE-2021-4221

If a domain name contained a RTL character, it would cause the domain to be rendered to the right of the path. This could lead to user confusion and spoofing attacks. <br>*This bug only affects Firefox for Android. Other operating systems are unaffected.*<br>*Note*: Due to a clerical error this advisory was not included in the original announcement, and was added in Feburary 2022. This vulnerability affects Firefox < 92.

pub. 2022-12-22

Information

ID: CWE-1007

Type: Base

Vulnerabilities: 3

MITRE CWE ↗

← CWE Dictionary