All 4 CVE vulnerabilities found in Dia, with AI-generated Chinese analysis, references, and POCs.
Vendor: The Browser Company of New York
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-77652 | Dia: dia: heap buffer overflow in wpg colormap parser via out-of-bounds palette index CWE-122 | 7.8 | High | 2026-08-26 |
| CVE-2026-77658 | Dia: dia: stack buffer overflow in bus object via unvalidated handle count in project files CWE-121 | 7.8 | High | 2026-08-26 |
| CVE-2025-15032 | CVE-2025-15032: Increased Spoofing risk; custom new window missing about:blank CWE-1021 | 7.4 | High | 2026-01-16 |
| CVE-2025-13132 | Dia: Increased Spoof Risk; Missing full screen toast CWE-1021 | 7.4 | High | 2025-11-21 |
All 4 known CVE vulnerabilities affecting Dia with full Chinese analysis, references, and POCs where available.