Skip to content
CVE PROGRAM SOURCE RECORD7.4 High

CVE-2025-13132

Dia: Increased Spoof Risk; Missing full screen toast

Description

This vulnerability allowed a site to enter fullscreen, after a user click, without a full-screen notification (toast) appearing. Without this notification, users could potentially be misled about what site they were on if a malicious site renders a fake UI (like a fake address bar.)

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

The Browser Company of New York Dia

Default version status: unaffected

  • 0 to < 1.6.0affected

References