CWE-450 - Multiple Interpretations of UI Input
- Abstraction:Base
- Structure:Simple
- Status:Draft
- Release Date:2006-07-19
- Latest Modification Date:2023-06-29
Weakness Name
Multiple Interpretations of UI Input
Description
The UI has multiple interpretations of user input but does not prompt the user when it selects the less secure interpretation.
Common Consequences
Scope: Other
Impact: Varies by Context
Related Weaknesses
BlackLock Ransomware Exposed After Researchers Exploit Leak Site Vulnerability
Retail giant Sam’s Club investigates Clop ransomware breach claims
Phishing-as-a-service operation uses DNS-over-HTTPS for evasion
New Ubuntu Linux security bypasses require manual mitigations
Oracle Health breach compromises patient data at US hospitals
Researchers Uncover 46 Critical Flaws in Solar Inverters From Sungrow, Growatt, and SMA
CoffeeLoader Uses GPU-Based Armoury Packer to Evade EDR and Antivirus Detection
Microsoft fixes Remote Desktop issues caused by Windows updates
Critical Firefox, Tor Browser sandbox escape flaw fixed (CVE-2025-2857)
CVE-2025-2783 Google Chromium Mojo Sandbox Escape Vulnerability
CVE-2019-9874 Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability
CVE-2019-9875 Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability
CVE-2025-30154 reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability
CVE-2025-1316 Edimax IC-7100 IP Camera OS Command Injection Vulnerability
CVE-2024-48248 NAKIVO Backup and Replication Absolute Path Traversal Vulnerability
CVE-2017-12637 SAP NetWeaver Directory Traversal Vulnerability
CVE-2025-24472 Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
CVE-2025-30066 tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability
CVE-2025-24201 Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability
InformationalInformation Disclosure - Suspicious Comments
InformationalRe-examine Cache-control Directives