Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2025-12905

Опубликовано: 08 нояб. 2025
Источник: ubuntu
Приоритет: medium
CVSS3: 5.4

Описание

Inappropriate implementation in Downloads in Google Chrome on Windows prior to 140.0.7339.80 allowed a remote attacker to bypass Mark of the Web via a crafted HTML page. (Chromium security severity: Low)

РелизСтатусПримечание
devel

not-affected

code not present
esm-apps/noble

not-affected

code not present
jammy

not-affected

code not present
noble

not-affected

code not present
plucky

not-affected

code not present
questing

not-affected

code not present
upstream

not-affected

Windows only

Показывать по

5.4 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.4
nvd
около 1 месяца назад

Inappropriate implementation in Downloads in Google Chrome on Windows prior to 140.0.7339.80 allowed a remote attacker to bypass Mark of the Web via a crafted HTML page. (Chromium security severity: Low)

CVSS3: 5.4
debian
около 1 месяца назад

Inappropriate implementation in Downloads in Google Chrome on Windows ...

CVSS3: 5.4
github
около 1 месяца назад

Inappropriate implementation in Downloads in Google Chrome on Windows prior to 140.0.7339.80 allowed a remote attacker to bypass Mark of the Web via a crafted HTML page. (Chromium security severity: Low)

CVSS3: 5.4
fstec
около 1 месяца назад

Уязвимость компонента Downloads браузера Google Chrome, позволяющая нарушителю обойти существующие ограничения безопасности

CVSS3: 8.8
redos
18 дней назад

Множественные уязвимости chromium

5.4 Medium

CVSS3