The vulnerability of Google Chrome’s Picture In Picture technology, which allows a perpetrator to compromise the integrity of protected information

The vulnerability of Google Chrome’s Picture In Picture technology is related to an improper limitation on the visual layers of the user interface. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information through a specially created HTML page...

CVE-2025-59479

CVE-2025-59479 affects CHOCO TEI WATCHER mini (IB-MCT001). The issue is an improper restriction of rendered UI layers or frames; when a user clicks content on a malicious page while logged in, unintended operations may be performed in the product. Connected sources (Red Hat, JVN/JSOC/CVE registri...

CVE-2025-0421

Improper Restriction of Rendered UI Layers or Frames vulnerability in Shopside Software Technologies Inc. Shopside allows iFrame Overlay. This issue affects Shopside: through 05022025...

cockpit 安全漏洞

Cockpit is an interactive server management interface. A security vulnerability exists in versions prior to cockpit 2.3.9-dev that stems from improper restriction of the rendered UI layer or framework...