CVE-2025-0443
Insufficient data validation in Extensions in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium)
- Score
- CVSS 3.1 8.8 High
- Status
- Analyzed - chrome-cve-admin@google.com
- Published
- 2025-01-15
- Last modified
- 2025-03-19
- Weaknesses
- CWE-79
Affected products
References
- https://chromereleases.googleblog.com/2025/01/stable-channel-update-for-desktop_14.html
- https://issues.chromium.org/issues/376625003
