CVE-2022-32919
webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing.
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · November 15, 2023
Updated · November 21, 2025
Description
A vulnerability was found in WebKitGTK and WPE WebKit that allows a remote attacker to conduct spoofing attacks by exploiting improper UI handling. This flaw enables attackers to create specially crafted websites that can display misleading information to users. By exploiting this vulnerability, an attacker can trick users into believing they are interacting with a legitimate website, potentially leading to a UI spoofing attack.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 4.7CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
CWE-1021 · Improper Restriction of Rendered UI Layers or Frames