CVE-2025-15032

Missing about:blank indicator in custom-sized new windows in Dia before 1.9.0 on macOS could allow an attacker to spoof a trusted domain in the window title and mislead users about the current site...

EUVD-2025-198517

A spoofing issue was addressed with improved truncation when displaying the fully qualified domain name This issue is fixed in Safari 18.5, macOS Sequoia 15.5. A website may be able to spoof the domain name in the title of a pop-up window...

CVE-2025-31266

The CVE-2025-31266 entry concerns a spoofing vulnerability in Safari/macOS where the domain name could be displayed inaccurately in a pop-up window’s title due to improper truncation. Connected sources confirm the affected products are Safari 18.5 and macOS Sequoia 15.5 and state that the issue w...