Barath Stalin K

An issue exists where the user interface misrepresents critical information, which could allow an unauthorized attacker to perform spoofing over a network.

Firefox for iOS incorrectly displayed specially crafted right-to-left (RTL) and internationalized domain names (IDNs) within link preview UI surfaces. A crafted RTL hostname could visually reorder parts of the displayed domain, potentially making attacker-controlled sites appear as trusted origins.

A flaw in the WebAppInstalls component of Google Chrome allowed a remote attacker to perform UI spoofing through a specially crafted HTML page. The Chromium security severity is rated as Medium.

An incorrect security user interface in the PictureInPicture feature in Google Chrome prior to version 146.0.7680.71 allowed a remote attacker to perform UI spoofing through a crafted HTML page. The Chromium security severity is rated as Low. The attack involves manipulating an HTML page to create a deceptive user interface within the PictureInPicture mode.

A flaw exists in Google Chrome's DevTools due to insufficient policy enforcement. This allows a remote attacker to bypass navigation restrictions by using a specially crafted HTML page. The Chromium security severity is rated as Low.

The issue involves a user interface misrepresentation of critical information in Microsoft Edge for iOS, allowing an unauthorized attacker to perform spoofing over a network.