CVE-2025-13132: The Browser Company Of New York Dia

High severity, CVSS 7.4. EPSS: 0.2% chance of exploitation in the next 30 days.

This vulnerability allowed a site to enter fullscreen, after a user click, without a full-screen notification (toast) appearing. Without this notification, users could potentially be misled about what site they were on if a malicious site renders a fake UI (like a fake address bar.)

Affected products

• The Browser Company Of New York Dia: before 1.6.0 (fixed in 1.6.0)

Published 2025-11-21. Last modified 2026-10-08.