CVEbaza.plSłownik CWECWE-1007
Common Weakness Enumeration

CWE-1007

Insufficient Visual Distinction of Homoglyphs Presented to User

Kategoria: BaseCVE: 3
Opis

Produkt wyświetla informacje lub identyfikatory użytkownikowi, ale mechanizm wyświetlania nie ułatwia rozróżnienia między wizualnie podobnymi lub identycznymi glifami (homoglifami), co może spowodować błędną interpretację glifu i niezamierzone, niezabezpieczone działanie użytkownika. Taka sytuacja stanowi zagrożenie dla bezpieczeństwa, gdyż użytkownik może zostać oszukany i wykonać działania wbrew swojej woli.

Description (EN)

The product displays information or identifiers to a user, but the display mechanism does not make it easy for the user to distinguish between visually similar or identical glyphs (homoglyphs), which may cause the user to misinterpret a glyph and perform an unintended, insecure action.

Podatności CVE z CWE-1007 (3)
8.7
CVSS
HIGH
CVE-2025-27611

base-x is a base encoder and decoder of any given alphabet using bitcoin style leading zero compression. Versions 4.0.0, 5.0.0, and all prior to 3.0.11, are vulnerable to attackers potentially deceiving users into sending funds to an unintended address. This issue has been patched in versions 3.0.11, 4.0.1, and 5.0.1.

pub. 2025-04-30
5.4
CVSS
MEDIUM
CVE-2025-0996

Inappropriate implementation in Browser UI in Google Chrome on Android prior to 133.0.6943.98 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: High)

pub. 2025-02-15
4.3
CVSS
MEDIUM
CVE-2021-4221

If a domain name contained a RTL character, it would cause the domain to be rendered to the right of the path. This could lead to user confusion and spoofing attacks. <br>*This bug only affects Firefox for Android. Other operating systems are unaffected.*<br>*Note*: Due to a clerical error this advisory was not included in the original announcement, and was added in Feburary 2022. This vulnerability affects Firefox < 92.

pub. 2022-12-22
Informacje
ID: CWE-1007
Typ: Base
Podatności: 3
MITRE CWE ↗
← Słownik CWE