CVEvulnerability

CVE-2025-13132

7.4 HIGH Published 2025-11-21 Modified 2026-10-08 Official page ↗
Status
Deferred
Published
2025-11-21
Last modified
2026-10-08
Assigner
59469e6c-7ea7-446f-8e43-06aa32c115e8
CVSS 3.1 (59469e6c-7ea7-446f-8e43-06aa32c115e8)
7.4 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
Weaknesses
CWE-1021

Description

This vulnerability allowed a site to enter fullscreen, after a user click, without a full-screen notification (toast) appearing. Without this notification, users could potentially be misled about what site they were on if a malicious site renders a fake UI (like a fake address bar.)

Related

Weakness · CWE (1)

  • CWE-1021 Improper Restriction of Rendered UI Layers or Frames weakness

References