Skip to content
CVE PROGRAM SOURCE RECORD7.4 High

CVE-2025-15032

CVE-2025-15032: Increased Spoofing risk; custom new window missing about:blank

Description

Missing about:blank indicator in custom-sized new windows in Dia before 1.9.0 on macOS could allow an attacker to spoof a trusted domain in the window title and mislead users about the current site.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

The Browser Company of New York Dia

Default version status: unaffected

  • 0 to < 1.9.0affected

References