Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2025-12436

Опубликовано: 10 нояб. 2025
Источник: redhat
CVSS3: 6.5
EPSS Низкий

Описание

Policy bypass in Extensions in Google Chrome prior to 142.0.7444.59 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension. (Chromium security severity: Medium)

Отчет

Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory.

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-266
https://bugzilla.redhat.com/show_bug.cgi?id=2413851chromium-browser: Policy bypass in Extensions

EPSS

Процентиль: 3%
0.00014
Низкий

6.5 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.9
ubuntu
5 месяцев назад

Policy bypass in Extensions in Google Chrome prior to 142.0.7444.59 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension. (Chromium security severity: Medium)

CVSS3: 5.9
nvd
5 месяцев назад

Policy bypass in Extensions in Google Chrome prior to 142.0.7444.59 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension. (Chromium security severity: Medium)

msrc
5 месяцев назад

Chromium: CVE-2025-12436 Policy bypass in Extensions

CVSS3: 5.9
debian
5 месяцев назад

Policy bypass in Extensions in Google Chrome prior to 142.0.7444.59 al ...

CVSS3: 5.9
github
5 месяцев назад

Policy bypass in Extensions in Google Chrome prior to 142.0.7444.59 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension. (Chromium security severity: Medium)

EPSS

Процентиль: 3%
0.00014
Низкий

6.5 Medium

CVSS3