PT-2025-32249
CVE-2025-8581
·
Published
2025-01-01
·
Updated
2025-11-10
Description by
CVSS 2.0
5.0
MediumMetricsAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 139.0.7258.66
Description
An inappropriate implementation in Extensions in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page if a user was convinced to perform specific UI gestures. The security severity is rated as Low.
Recommendations
Update Google Chrome to version 139.0.7258.66 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾