CVE-2025-15032 - CVE House
Back to Database
Status published High CVE-2025-15032

CVE-2025-15032: Increased Spoofing risk; custom new window missing about:blank

Vulnerability Description

Missing about:blank indicator in custom-sized new windows in Dia before 1.9.0 on macOS could allow an attacker to spoof a trusted domain in the window title and mislead users about the current site.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-15032

Credits & Attribution

No credits recorded in the NVD database.

References

More from The Browser Company of New York

View All →
CVE-2025-14812
Address bar spoofing risk in Arc Search on iOS
High 7.5
CVE-2025-14809
Address bar spoofing risk in ArcSearch on Android
High 7.4
CVE-2025-13132
Dia: Increased Spoof Risk; Missing full screen toast
High 7.4

Affected Vendor

The Browser Company of New York

View all reports →

Affected Software

Dia
Vulnerable Versions:
0

Timeline

Official Publish: January 16th, 2026
Last Modified: January 16th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N

Weaknesses (CWE)

CWE-1021

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.