CVE-2025-9865

Inappropriate implementation in Toolbar in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform domain spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-9867

Inappropriate implementation in Downloads in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-9867

Inappropriate implementation in Downloads in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-9865

CVE-2025-9865 : In Google Chrome on Android, prior to version 140.0.7339.80, an inappropriate implementation in Toolbar allows a remote attacker to induce a user, via crafted HTML and specific UI gestures, to perform domain spoofing. Impact is described as a Chromium-style vulnerability with pote...

CVE-2024-13066

Improper Restriction of Rendered UI Layers or Frames vulnerability in Akinsoft LimonDesk allows iFrame Overlay, CAPEC - 103 - Clickjacking. This issue affects LimonDesk: from s1.02.14 before v1.02.17...

CVE-2024-13066

Improper Restriction of Rendered UI Layers or Frames vulnerability in Akinsoft LimonDesk allows iFrame Overlay, CAPEC - 103 - Clickjacking. This issue affects LimonDesk: from s1.02.14 before v1.02.17...

CVE-2024-13066

CVE-2024-13066 describes an improper restriction of rendered UI layers or frames in Akinsoft LimonDesk (affected: s1.02.14 up to

Improper Restriction of Rendered UI Layers or Frames

Overview Affected versions of this package are vulnerable to Improper Restriction of Rendered UI Layers or Frames via the iframe element. An attacker can execute unauthorized scripts in the context of a user's browser by embedding the application within a malicious frame. Note: This is only...

CVE-2025-21032

Improper access control in One UI Home prior to SMR Sep-2025 Release 1 allows physical attackers to bypass Kiosk mode under limited conditions...

CVE-2025-21032

Improper access control in One UI Home prior to SMR Sep-2025 Release 1 allows physical attackers to bypass Kiosk mode under limited conditions...

CVE-2025-21032

Improper access control in One UI Home prior to SMR Sep-2025 Release 1 allows physical attackers to bypass Kiosk mode under limited conditions...

CVE-2025-21032

CVE-2025-21032 affects Samsung One UI Home prior to SMR Sep-2025 Release 1, with an improper access control risk that can allow a physical attacker to bypass Kiosk mode under limited conditions. Root cause is access-control weakness in One UI Home, as described across multiple sources (Red Hat ad...

CVE-2025-21032

Improper access control in One UI Home prior to SMR Sep-2025 Release 1 allows physical attackers to bypass Kiosk mode under limited conditions...

CVE-2025-21029

CVE-2025-21029 concerns Samsung Mobile/Samsung System UI prior to SMR Sep-2025 Release 1. The issue is described as improper handling of insufficient permissions in System UI, enabling local attackers to send arbitrary replies to messages from the cover display. Connected sources confirm affected...

CVE-2025-56139

LinkedIn Mobile Application for Android version 4.1.1087.2 fails to update link preview metadata image, title, description when a user replaces the original URL in a post or comment before publishing. As a result, the stale preview remains visible while the clickable link points to a different UR...

PT-2025-35683

Name of the Vulnerable Software and Affected Versions: System UI versions prior to SMR Sep-2025 Release 1 Description: Improper handling of insufficient permission in System UI allows local attackers to send arbitrary replies to messages from the cover display. Recommendations: Update System UI t...

PT-2025-44692

Name of the Vulnerable Software and Affected Versions Google Chrome affected versions not specified Description A flaw exists in Google Chrome that could allow attackers to impact the system. The issue involves an incorrect security user interface in the Omnibox. Recommendations At the moment,...

Malicious code in nf-web-ui (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9daed61da73f36e121e5335edee0f392a2a0f1ee89890f0589974f04ff0f1c9 Any computer that has this package installed or running should be considered...

MAL-2025-45306 Malicious code in nf-web-ui (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c9daed61da73f36e121e5335edee0f392a2a0f1ee89890f0589974f04ff0f1c9 Any computer that has this package installed or running should be considered...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc USA. A security vulnerability exists in Google Chrome versions prior to 140.0.7339.80, which stems from an improperly implemented download that could lead to UI spoofing...