Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2025-8881

Опубликовано: 13 авг. 2025
Источник: debian
EPSS Низкий

Описание

Inappropriate implementation in File Picker in Google Chrome prior to 139.0.7258.127 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

Пакеты

ПакетСтатусВерсия исправленияРелизТип
chromiumfixed139.0.7258.127-1package
chromiumend-of-lifebullseyepackage

EPSS

Процентиль: 3%
0.00018
Низкий

Связанные уязвимости

CVSS3: 6.5
ubuntu
2 месяца назад

Inappropriate implementation in File Picker in Google Chrome prior to 139.0.7258.127 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVSS3: 6.5
nvd
2 месяца назад

Inappropriate implementation in File Picker in Google Chrome prior to 139.0.7258.127 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

msrc
2 месяца назад

Chromium: CVE-2025-8881 Inappropriate implementation in File Picker

CVSS3: 6.5
github
2 месяца назад

Inappropriate implementation in File Picker in Google Chrome prior to 139.0.7258.127 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

CVSS3: 6.5
fstec
2 месяца назад

Уязвимость компонента File Picker браузера Google Chrome, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 3%
0.00018
Низкий