CVE-2025-7021

CVE-2025-7021 affects OpenAI Operator SaaS on Web via the Fullscreen API handling and UI rendering, enabling a remote attacker to capture sensitive user input by presenting a deceptive fullscreen interface with overlaid fake controls and distracting elements (e.g., cookie prompts). The connected ...