Dia security vulnerabilities

Dia is an AI-driven smart browser developed by Dia Company. Versions of Dia prior to 1.9.0 contained a security vulnerability. This vulnerability stemmed from the absence of the about:blank indicator in new windows with custom sizes, which could allow attackers to deceive trusted domains and...

CVE-2025-15032: Improper Restriction of Rendered UI Layers or Frames

Missing about:blank indicator in custom-sized new windows in Dia before 1.9.0 on macOS could allow an attacker to spoof a trusted domain in the window title and mislead users about the current site...

PT-2026-3271

Name of the Vulnerable Software and Affected Versions Dia versions prior to 1.9.0 Description A flaw exists in Dia that, on macOS, could allow an attacker to spoof a trusted domain in the window title of custom-sized new windows. This could mislead users about the current site due to a missing...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001037)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001037 advisory. net/ipv4/tcpinput.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments, which makes it easier for remote attackers to hija...

The vulnerability of the DWM Core Library in Windows operating systems allows attackers to elevate their privileges.

The vulnerability of the DWM Core Library in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain elevated privileges...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-003431)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003431 advisory. net/ipv4/tcpinput.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments, which makes it easier for remote attackers to hija...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003058)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003058 advisory. net/ipv4/tcpinput.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments, which makes it easier for remote attackers to hija...

CVE-2026-20805

Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose information locally...

CVE-2026-20842

Use after free in Windows DWM allows an authorized attacker to elevate privileges locally...

CVE-2026-20871

Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally...

Microsoft Fixes 114 Windows Flaws in January 2026 Patch, One Actively Exploited

Microsoft on Tuesday rolled out its first security update for 2026, addressing 114 security flaws, including one vulnerability that it said has been actively exploited in the wild. Of the 114 flaws, eight are rated Critical, and 106 are rated Important in severity. As many as 58 vulnerabilities...

Patch Tuesday, January 2026 Edition

Microsoft today issued patches to plug at least 113 security holes in its various Windows operating systems and supported software. Eight of the vulnerabilities earned Microsoft's most-dire "critical" rating, and the company warns that attackers are already exploiting one of the bugs fixed today...

The vulnerability of the window manager for desktop workstations in Windows operating systems allows attackers to disclose protected information.

The vulnerability of the Desktop Window Manager DWM in Windows operating systems relates to the display of information. Exploiting this vulnerability can allow an attacker to reveal protected information displayed by the Desktop Window Manager...

MiracleLinux 3 : xorg-x11-server-1.1.1-48.26.5.3AXS3 (AXSA:2008-80:01)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2008-80:01 advisory. X.Org is an open source implementation of the X Window System. It provides basic low-level functionality that full-fledged graphical user interfaces a...

filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock

Vulnerability Summary Title: Time-of-Check-Time-of-Use TOCTOU Symlink Vulnerability in SoftFileLock Affected Component: filelock package - SoftFileLock class File: src/filelock/soft.py lines 17-27 CWE: CWE-362, CWE-367, CWE-59 --- Description A TOCTOU race condition vulnerability exists in the...

CVE-2026-20871

Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-20871

Use after free in Desktop Windows Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-20842

Use after free in Windows DWM allows an authorized attacker to elevate privileges locally...

CVE-2026-20805

Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose information locally...

CVE-2026-20805

Exposure of sensitive information to an unauthorized actor in Desktop Windows Manager allows an authorized attacker to disclose information locally...