VULNERABILITY INTELLIGENCE
CVE-2025-13132
CVSS score7.4 HIGH
EPSS probability0.26%
CISA KEVNot currently listed
Published2025-11-21
Last modified2026-10-08
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
Description
This vulnerability allowed a site to enter fullscreen, after a user click, without a full-screen notification (toast) appearing. Without this notification, users could potentially be misled about what site they were on if a malicious site renders a fake UI (like a fake address bar.)
Weakness classification
- 59469e6c-7ea7-446f-8e43-06aa32c115e8: CWE-1021