CWE · MITRE source
CWE-357Insufficient UI Warning of Dangerous Operations
The user interface provides a warning to a user regarding dangerous or sensitive operations, but the warning is not noticeable enough to warrant attention.
Last updated: 22 August 2026 14:14 UTC
Control responseHuman-reviewed
Answering this weakness across the control lifecycle, from our framework cross-walks.
Prevent
Stop it (NIST 800-53 / CSF Protect)
PR.PS-06
Detect
Catch it (CSF Detect / Respond)
—
Harden
Shrink the surface (DISA STIG)
—
Validate
Prove the fix (OWASP ASVS)
—
NIST 800-53 r5 controls that address this weakness (0)AI-assisted
| Control | Title | Family | Why it addresses this CWE |
|---|---|---|---|
| No NIST controls proposed yet. | |||
Top CVEs of this weakness type, ranked by Risk Priority
| CVE | Risk | CVSS | EPSS | Published |
|---|---|---|---|---|
CVE-2019-13521 UPD | 6.5 | 7.8 | 0.0557 | 2020-01-27 |
CVE-2025-33054 UPD | 6.3 | 8.1 | 0.0086 | 2025-07-08 |
CVE-2021-22645 UPD | 6.2 | 7.8 | 0.0151 | 2021-02-23 |
CVE-2025-49582 UPD | 6.2 | 8.0 | 0.0072 | 2025-06-13 |
CVE-2024-43505 UPD | 6.0 | 7.8 | 0.0075 | 2024-10-08 |
CVE-2025-49585 UPD | 6.0 | 8.0 | 0.0037 | 2025-06-13 |
CVE-2025-49587 UPD | 6.0 | 8.0 | 0.0037 | 2025-06-13 |
CVE-2026-26151 UPD | 5.6 | 7.1 | 0.0083 | 2026-04-14 |
CVE-2022-41904 UPD | 4.8 | 6.4 | 0.0043 | 2022-11-11 |
CVE-2024-21387 UPD | 4.6 | 5.3 | 0.0072 | 2024-01-26 |
CVE-2024-30058 UPD | 4.4 | 5.4 | 0.0039 | 2024-06-13 |
CVE-2024-43580 | 4.4 | 5.4 | 0.0039 | 2024-10-17 |
CVE-2024-26188 UPD | 3.9 | 4.3 | 0.0082 | 2024-02-23 |
CVE-2024-29057 UPD | 3.9 | 4.3 | 0.0100 | 2024-03-22 |
CVE-2024-49054 UPD | 3.8 | 4.3 | 0.0059 | 2024-11-22 |
CVE-2025-47967 UPD | 3.7 | 4.7 | 0.0037 | 2025-09-16 |
CVE-2026-58597 | 3.7 | 4.3 | 0.0040 | 2026-07-03 |
CVE-2025-49583 UPD | 3.1 | 3.5 | 0.0024 | 2025-06-13 |
CVE-2026-47782 UPD | 2.7 | 3.3 | 0.0013 | 2026-05-20 |
CVE-2024-21336 UPD | 2.5 | 2.5 | 0.0054 | 2024-01-26 |