High severity7.4NVD Advisory· Published Jan 16, 2026· Updated Apr 15, 2026
CVE-2025-15032
CVE-2025-15032
Description
Missing about:blank indicator in custom-sized new windows in Dia before 1.9.0 on macOS could allow an attacker to spoof a trusted domain in the window title and mislead users about the current site.
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.