CVE-2025-12445 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Policy bypass in Extensions in Google Chrome prior to 142.0.7444.59 allowed an attacker who convinced a user to install a malicious extension to leak cross-orig…
Medium CVSS: 6.5

CVE-2025-12445

Policy bypass in Extensions in Google Chrome prior to 142.0.7444.59 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. (Chromium security severity: Low)
Vendor
Google
Product
Chrome
CWE
CWE-288
Yayın Tarihi
2025-11-10 20:15:39
Güncelleme
2025-11-13 15:21:53
Source Identifier
chrome-cve-admin@google.com
KEV Date Added
-

Kategoriler

CWE-288 Chrome MEDIUM Google 2025

Referanslar

https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_28.html https://issues.chromium.org/issues/428397712