Dia Browser Fullscreen Spoofing Vulnerability

A vulnerability in Dia Browser on macOS versions prior to 1.6 allows websites to enter fullscreen mode without displaying a notification. This absence of a warning could mislead users about their current site, especially if a malicious site creates a fake user interface, such as a counterfeit address bar. In versions 1.6 and later, the browser correctly notifies users when a site enters fullscreen, thereby mitigating the risk of spoofing.

Impact

Exploitation of this vulnerability increases the risk of user interface spoofing, potentially misleading users about their current website.

Remediation

Users are advised to update Dia Browser to version 1.6 or newer, which includes the necessary fix.