CVE-2025-13107

Medium CVSS: 4.3

Inappropriate implementation in Compositing in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

Vendor

Google

Product

Chrome

CWE

CWE-451

Yayın Tarihi

2025-11-14 03:15:56

Güncelleme

2025-11-17 12:18:25

Source Identifier

chrome-cve-admin@google.com

KEV Date Added

Kategoriler

CWE-451 Chrome MEDIUM Google 2025

Referanslar

https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop.html https://issues.chromium.org/issues/429440615

Benzer Kayıtlar

High

CVE-2026-5292

Out of bounds read in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to perform an out of…

Medium

CVE-2026-5291

Inappropriate implementation in WebGL in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to obtain poten…

Critical

CVE-2026-5290

Use after free in Compositing in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the…

Critical

CVE-2026-5289

Use after free in Navigation in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the…

Critical

CVE-2026-5288

Use after free in WebView in Google Chrome on Android prior to 146.0.7680.178 allowed a remote attacker who had compromi…

High

CVE-2026-5287

Use after free in PDF in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code insid…