27 matches found
CVE-2025-14744
CVE-2025-14744 concerns Unicode RTLO spoofing in Firefox for iOS prior to version 144.0. The issue allows a malicious website to render spoofed filenames in the downloads UI, potentially misleading users into saving files with an unintended file type. Affected product: Firefox for iOS
Security Vulnerabilities fixed in Firefox for iOS 144.0 — Mozilla
Unicode RTLO characters could allow malicious websites to spoof filenames in the downloads UI for Firefox for iOS, potentially tricking users into saving files of an unexpected file type...
PT-2026-31515
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 147.0.7727.55 Description A security flaw in the Downloads user interface in Google Chrome, before version 147.0.7727.55, could allow a remote attacker to perform UI spoofing. This requires convincing a user to...
DEBIAN-CVE-2024-8906
Incorrect security UI in Downloads in Google Chrome prior to 129.0.6668.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...
SUSE CVE-2023-5853
Incorrect security UI in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to obfuscate security UI via a crafted HTML page. Chromium security severity: Medium...
PT-2023-6637 · Google +3 · Google Chrome +3
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 119.0.6045.105 Description: The issue is related to incorrect security UI in the Downloads component of Google Chrome, which can be exploited by a remote attacker to obfuscate security UI via a crafted HTML pag...
