PT-2026-3271 · Dia · Dia

CVE-2025-15032 · Publicado 2026-01-16 · Atualizado 2026-01-17

Positive Technologies (AI Summary)

CVSS v3.1

7.4

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Dia versions prior to 1.9.0

Description A flaw exists in Dia that, on macOS, could allow an attacker to spoof a trusted domain in the window title of custom-sized new windows. This could mislead users about the current site due to a missing 'about:blank' indicator.

Recommendations Update to Dia version 1.9.0 or later.

Correção

Clickjacking

Enumeração de Fraquezas

CWE-1021

Identificadores relacionados

CVE-2025-15032

Produtos afetados

Dia

Referências · 4

• https://twitter.com/CVEnew/status/2012303229426843780 · Publicação no Twitter
• https://twitter.com/UndercodeUpdate/status/2012381343628358049 · Publicação no Twitter
• https://diabrowser.com/security/bulletins#CVE-2025-15032 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-15032 · Nota de Segurança