SEC.co
Emergency

By weakness (CWE)

CWE-357: related vulnerabilities

CVEs classified under CWE-357. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

1 published vulnerability

Known exploited (KEV)CriticalHighMediumAll recent
  • CVE-2026-58597MEDIUM 4.3

    Microsoft Edge (Chromium-based) contains a UI design flaw that fails to adequately warn users before dangerous operations, creating an opening for attackers to conduct spoofing attacks over the network. An attacker cannot exploit this directly without user interaction—the vulnerability requires a person to be tricked into performing an action they would normally avoid if properly warned. The risk stems from insufficient UI clarity rather than a code execution flaw.