webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing

A flaw was found in WebKitGTK. Visiting a website that frames malicious content can cause UI spoofing due to UI issues...

webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing

A flaw was found in WebKitGTK. Visiting a website that frames malicious content can cause UI spoofing due to UI issues...

webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing

A flaw was found in WebKitGTK. Visiting a website that frames malicious content can cause UI spoofing due to UI issues...

webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing

A flaw was found in WebKitGTK. Visiting a website that frames malicious content can cause UI spoofing due to UI issues...

webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing

A flaw was found in WebKitGTK. Visiting a website that frames malicious content can cause UI spoofing due to UI issues...

Roundcube Webmail Project Roundcube Webmail permission and access control issues vulnerability

The Roundcube Webmail project contains a permission and access control vulnerability in versions prior to 1.6.20 and 1.7.5 of version 1.7.x. This vulnerability stems from CSS scope bypass in HTML messages. The rcubeutils::modcssstyles function fails to treat the “at-rule” prefix as a selector...

CVE-2026-109434

Fenrir Sleipnir Browser for Android before 3.9.0 contains a UI spoofing vulnerability that allows remote attackers to impersonate the browser's trusted address bar by entering fullscreen mode via the Fullscreen API without displaying a persistent notification or trusted-origin indicator. Attacker...

EUVD-2026-104568

Fenrir Sleipnir Browser for Android before 3.9.0 contains a UI spoofing vulnerability that allows remote attackers to impersonate the browser's trusted address bar by entering fullscreen mode via the Fullscreen API without displaying a persistent notification or trusted-origin indicator. Attacker...

CVE-2026-109434 Sleipnir Browser < 3.9.0 Fullscreen Address Bar Spoofing

Fenrir Sleipnir Browser for Android before 3.9.0 contains a UI spoofing vulnerability that allows remote attackers to impersonate the browser's trusted address bar by entering fullscreen mode via the Fullscreen API without displaying a persistent notification or trusted-origin indicator. Attacker...

CVE-2026-109434

Fenrir Sleipnir Browser for Android before version 3.9.0 is vulnerable to a UI spoofing flaw. By utilizing the Fullscreen API to enter fullscreen mode, remote attackers can bypass persistent notifications or trusted-origin indicators to impersonate the browser's trusted address bar. This allows t...

CVE-2026-109434: User Interface (UI) Misrepresentation of Critical Information

Fenrir Sleipnir Browser for Android before 3.9.0 contains a UI spoofing vulnerability that allows remote attackers to impersonate the browser's trusted address bar by entering fullscreen mode via the Fullscreen API without displaying a persistent notification or trusted-origin indicator. Attacker...

PT-2026-117568

Fenrir Sleipnir Browser for Android before 3.9.0 contains a UI spoofing vulnerability that allows remote attackers to impersonate the browser's trusted address bar by entering fullscreen mode via the Fullscreen API without displaying a persistent notification or trusted-origin indicator. Attacker...

Astra Linux – vulnerability in webkit2gtk

The issue has been resolved through improved UI handling. It is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6, iPadOS 15.6, and macOS Monterey 12.5. Visiting a website that frames malicious content may result in UI spoofing...

Astra Linux – Vulnerability in Chromium

Insecure security user interfaces in Views in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to perform certain UI gestures to perform UI spoofing through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in TabGroups in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via malicious network traffic. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

Astra Linux – vulnerability in Chromium

Insufficient validation of untrusted input in the Wallet component within Google Chrome prior to version 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a specially crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Insufficient validation of untrusted input in Google Chrome’s Enterprise version prior to version 150.0.7871.47 allowed a remote attacker to perform UI spoofing through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – vulnerability in Chromium

The improper implementation in Autofill in Google Chrome prior to version 150.0.7871.47 allowed a remote attacker who convinced a user to perform certain UI gestures to perform UI spoofing via a specially crafted HTML page. Chromium security severity: Medium...