CVE-2025-4102025

Security Advisory: CVE-2025-4102025 Summary A critical vulnerability has been discovered in Copilot AI affecting how web query citation links are rendered after Retrieval-Augmented Generation RAG operations. When users request page summaries or perform web-based queries, all subsequent citation...

Claude-Code-MCP-Injection-PoC

Claude Code: MCP Tool Confirmation Prompt Misrepresentation A professional Proof-of-Concept PoC demonstrating a critical UI/UX flaw in Anthropic's Claude Code. This vulnerability allows a malicious MCP server to mislead users into approving arbitrary command execution by misrepresenting tool...

CVE-2026-87597

UI misrepresentation in CustomTabs in Google Chrome on on Android prio...

CVE-2026-87649

UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010...

CVE-2026-87559

UI misrepresentation in UI in Google Chrome prior to 153.0.8010.36 all...

CVE-2026-87496

UI misrepresentation in Browser in Google Chrome prior to 153.0.8010.3...

CVE-2026-87458

UI misrepresentation in Geometry in Google Chrome prior to 153.0.8010...

CVE-2026-87462

UI misrepresentation in FedCM in Google Chrome prior to 153.0.8010.36...

CVE-2026-87501

UI misrepresentation in Passwords in Google Chrome prior to 153.0.8010...

CVE-2026-87567

UI misrepresentation in UrlFormatting in Google Chrome prior to 153.0...

CVE-2026-87445

UI misrepresentation in Session in Google Chrome prior to 153.0.8010.3...

CVE-2026-87635

UI misrepresentation in Payments in Google Chrome prior to 153.0.8010...

CVE-2026-87653

UI misrepresentation in FullScreen in Google Chrome on on Windows prio...

CVE-2026-87507

UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010...

CVE-2026-87624

UI misrepresentation in Passwords in Google Chrome on on Android prior...

CVE-2026-87583

UI misrepresentation in Passwords in Google Chrome on on Android prior...

CVE-2026-87484

UI misrepresentation in Geometry in Google Chrome prior to 153.0.8010...

CVE-2025-492025

CVE-2025-492025 Security Advisory: CVE-2025-492025 Summary A vulnerability has been identified in Copilot AI that causes an unintended hyperlink to be included in the "link source" section whenever Copilot retrieves a web query. This issue resulted in users clicking on links to...

CVE-2026-87624

A flaw was found in Google Chrome on Android. A remote attacker, after compromising the renderer process, could exploit a user interface UI misrepresentation vulnerability. This vulnerability allows the attacker to spoof UI elements by using a specially crafted HTML page, potentially deceiving...

CVE-2026-87653

A flaw was found in chromium-browser. A remote attacker could exploit this vulnerability by crafting a malicious HTML page. This could lead to user interface UI misrepresentation in FullScreen mode, allowing the attacker to spoof UI elements...