PT-2025-35800

CVE-2025-9867

·

Published

2025-05-04

·

Updated

2025-11-11

Description by

CVSS 2.0
6.4
Medium
MetricsAV:N/AC:L/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 140.0.7339.80
Description An inappropriate implementation in Downloads in Google Chrome on Android allowed a remote attacker to perform UI spoofing via a crafted HTML page.
Recommendations Update Google Chrome to version 140.0.7339.80 or later.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALT-PU-2025-11532
DSA-5993-1
OPENSUSE-SU-2025:15524-1
Found an issue in the description? Have something to add? Feel free to write us 👾