Common Weakness Enumeration
CWE-1007 Insufficient Visual Distinction of Homoglyphs Presented to User
Description
The product displays information or identifiers to a user, but the display mechanism does not make it easy for the user to distinguish between visually similar or identical glyphs (homoglyphs), which may cause the user to misinterpret a glyph and perform an unintended, insecure action.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-1007 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-v3wm-qf9p-c549 | CVE-2026-48760 | MODERATE | - |
Symfony: HtmlSanitizer URL Parser Deny Gates Underinclusive: Percent-Encoded BiDi Marks and Unicode Whitespace Bypass Visual-Spoofing Defense |
2026-06-15 |
| GHSA-h5vq-qfcg-4m6p | CVE-2026-45064 | MODERATE | - |
Symfony's HtmlSanitizer URL Attributes Pass Through BiDi Override Characters → Visual href Spoofing |
2026-05-27 |
| GHSA-xq7p-g2vc-g82p | CVE-2025-27611 | HIGH |
Homograph attack allows Unicode lookalike characters to bypass validation. |
2025-05-01 |