Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2025-12908

Опубликовано: 08 нояб. 2025
Источник: ubuntu
Приоритет: medium
CVSS3: 5.4

Описание

Insufficient validation of untrusted input in Downloads in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Low)

РелизСтатусПримечание
devel

not-affected

code not present
esm-apps/noble

not-affected

code not present
jammy

not-affected

code not present
noble

not-affected

code not present
plucky

not-affected

code not present
questing

not-affected

code not present
upstream

not-affected

only affects Android

Показывать по

5.4 Medium

CVSS3

Связанные уязвимости

CVSS3: 5.4
nvd
3 месяца назад

Insufficient validation of untrusted input in Downloads in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Low)

CVSS3: 5.4
debian
3 месяца назад

Insufficient validation of untrusted input in Downloads in Google Chro ...

CVSS3: 5.4
github
3 месяца назад

Insufficient validation of untrusted input in Downloads in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Low)

CVSS3: 5.4
fstec
3 месяца назад

Уязвимость компонента Downloads браузера Google Chrome, позволяющая нарушителю выполнить подмену домена

5.4 Medium

CVSS3