SecBoard
Zurück zur CVE-Übersicht

CVE-2025-12440

MEDIUM(5.3)

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

Risk Signal Score13/100 — NIEDRIG
  • CVSS 5.3 — Mittel

Erwähnungen (letzte 60 Tage)

Artikel

EPSS-Score

0.2%

Exploit-Wahrscheinlichkeit (30 Tage)

CVSS Score

5.3

Technische Schwere

Beschreibung

Inappropriate implementation in Autofill in Google Chrome prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low)

Betroffene Produkte

  • cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

Referenzen