webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing

A flaw was found in WebKitGTK. Visiting a website that frames malicious content can cause UI spoofing due to UI issues...

webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing

A flaw was found in WebKitGTK. Visiting a website that frames malicious content can cause UI spoofing due to UI issues...

webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing

A flaw was found in WebKitGTK. Visiting a website that frames malicious content can cause UI spoofing due to UI issues...

webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing

A flaw was found in WebKitGTK. Visiting a website that frames malicious content can cause UI spoofing due to UI issues...

webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing

A flaw was found in WebKitGTK. Visiting a website that frames malicious content can cause UI spoofing due to UI issues...

webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing

A flaw was found in WebKitGTK. Visiting a website that frames malicious content can cause UI spoofing due to UI issues...

Roundcube Webmail Project Roundcube Webmail permission and access control issues vulnerability

The Roundcube Webmail project contains a permission and access control vulnerability in versions prior to 1.6.20 and 1.7.5 of version 1.7.x. This vulnerability stems from CSS scope bypass in HTML messages. The rcubeutils::modcssstyles function fails to treat the “at-rule” prefix as a selector...

CVE-2026-109434

Fenrir Sleipnir Browser for Android before 3.9.0 contains a UI spoofing vulnerability that allows remote attackers to impersonate the browser's trusted address bar by entering fullscreen mode via the Fullscreen API without displaying a persistent notification or trusted-origin indicator. Attacker...

CVE-2026-109434

Fenrir Sleipnir Browser for Android before version 3.9.0 is vulnerable to a UI spoofing flaw. By utilizing the Fullscreen API to enter fullscreen mode, remote attackers can bypass persistent notifications or trusted-origin indicators to impersonate the browser's trusted address bar. This allows t...

CVE-2026-109434 Sleipnir Browser < 3.9.0 Fullscreen Address Bar Spoofing

Fenrir Sleipnir Browser for Android before 3.9.0 contains a UI spoofing vulnerability that allows remote attackers to impersonate the browser's trusted address bar by entering fullscreen mode via the Fullscreen API without displaying a persistent notification or trusted-origin indicator. Attacker...

EUVD-2026-104568

Fenrir Sleipnir Browser for Android before 3.9.0 contains a UI spoofing vulnerability that allows remote attackers to impersonate the browser's trusted address bar by entering fullscreen mode via the Fullscreen API without displaying a persistent notification or trusted-origin indicator. Attacker...

CVE-2026-109434: User Interface (UI) Misrepresentation of Critical Information

Fenrir Sleipnir Browser for Android before 3.9.0 contains a UI spoofing vulnerability that allows remote attackers to impersonate the browser's trusted address bar by entering fullscreen mode via the Fullscreen API without displaying a persistent notification or trusted-origin indicator. Attacker...

PT-2026-117568

Fenrir Sleipnir Browser for Android before 3.9.0 contains a UI spoofing vulnerability that allows remote attackers to impersonate the browser's trusted address bar by entering fullscreen mode via the Fullscreen API without displaying a persistent notification or trusted-origin indicator. Attacker...

Astra Linux – vulnerability in Chromium

Inappropriate implementation in the Media UI of Google Chrome on ChromeOS prior to version 150.0.7871.47 allowed a remote attacker who convinced a user to perform certain UI gestures to perform UI spoofing via a specially crafted HTML page. Chromium security severity: Medium...

Astra Linux – vulnerability in Chromium

Improper implementation in File Input in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to perform certain UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in TabGroups in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via malicious network traffic. Chromium security severity: Low...

Astra Linux – vulnerability in Chromium

Insufficient validation of untrusted input in the Wallet component within Google Chrome prior to version 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a specially crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Credential Management in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted input in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

Astra Linux – vulnerability in Chromium

Improper implementation in Views in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...