Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2025-13132

Dia: Increased Spoof Risk; Missing full screen toast

This vulnerability allowed a site to enter fullscreen, after a user click, without a full-screen notification (toast) appearing. Without this notification, users could potentially be misled about what site they were on if a malicious site renders a fake UI (like a fake address bar.)

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
The Browser Company
Products
Dia
CVE-2025-15032

CVE-2025-15032: Increased Spoofing risk; custom new window missing about:blank

Missing about:blank indicator in custom-sized new windows in Dia before 1.9.0 on macOS could allow an attacker to spoof a trusted domain in the window title and mislead users about the current site.

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
Apple Dia The Browser Company
Products
Macos Dia Dia