CNNVD-202601-2771 Information

CNNVD ID

CNNVD-202601-2771

CVE-2025-15032

  • CNNVD Published: 2026-01-16

Description (Chinese)

Dia是Dia公司的一款AI驱动的智能浏览器。 Dia 1.9.0之前版本存在安全漏洞,该漏洞源于自定义大小的新窗口中缺少about:blank指示器,可能导致攻击者欺骗受信任的域名并误导用户。

Description (English)

Dia is an AI-driven smart browser for Dia. There was a security loophole in the pre-dia 1.9.0, which stemmed from the absence of about:blank indicator in a new, self-defined window, which could lead the attackers to deceive trusted domain names and mislead users.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

Dia

Published

2026-01-16

Last Modified

2026-02-24

References

https://www.diabrowser.com/security/bulletins#CVE-2025-15032

Share on: