Deceptive Fullscreen Vulnerability in Diabrowser

CVE-2025-13132

What is CVE-2025-13132?

This vulnerability in Diabrowser enables a site to enter fullscreen mode after a user click without displaying a notification. This oversight poses a risk as it can mislead users about their actual location, allowing malicious sites to render deceptive user interfaces, such as mimicking valid address bars. Awareness of this vulnerability is crucial for ensuring user safety online.

References