CVE-2026-22918CWE-1021

An attacker may exploit missing protection against clickjacking by tricking users into performing unintended actions through maliciously crafted web pages…

Medium · published January 15, 2026

CVSS v3.1
4.3
EPSS
0%
Percentile
23.7
In the wild
Unconfirmed
What it is

An attacker may exploit missing protection against clickjacking by tricking users into performing unintended actions through maliciously crafted web pages, leading to the extraction of sensitive data.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00319 · 23.7th percentile
Weakness
CWE-1021 · Improper Restriction of Rendered UI Layers or Frames
Published
2026-01-15T13:08Z
EPSS history
Timeline
  • 15 JAN 13:08Z
    An attacker may exploit missing protection against clickjacking by tricking users into performing unintended actions through maliciously crafted web pages…
    cvelistv5