Chromium CVE-2025-12444 Incorrect Security UI in Fullscreen UI

Microsoft disclosed CVE-2025-12444, a Chromium vulnerability involving incorrect security UI behavior when browsers enter fullscreen mode. The flaw allows malicious web pages to spoof browser elements and mislead users into performing sensitive actions like entering credentials or approving permissions. What's interesting: the risk arises from improper UI state management that fails to alert users when fullscreen view hides address or permission bars. Affects Chromium-based browsers including Chrome and Edge. The fullscreen API exploitation enables spoofed login screens by masking visual security indicators. Microsoft released mitigations; fix is under review within Chromium project.

📂 Browser

CVE-2025-12444: Chromium Fullscreen UI Spoofing Flaw