CVE-2025-12906 — Vulnetix

Try Vulnetix Request Demo

CVE-2025-12906 PUBLISHED CVSS 5.400000095367432 MEDIUM

Inappropriate implementation in Permissions in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

EPSS 0.11% · 29.5th percentile

Risk Scores

CVSS v3.1

5.400000095367432

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

EPSS Score

0.11%

29.5th percentile

Affected Products

Vendor	Product	Versions
Google	Chrome	140.0.7339.80
google	chrome	0

Timeline

Nov 7, 2025 CVE Published
Nov 8, 2025 EPSS Score
Nov 8, 2025 Coalition ESS Score
Nov 8, 2025 PoC Published
Nov 13, 2025 EPSS Score
Nov 17, 2025 EPSS Score
Nov 21, 2025 CVE Updated
Nov 22, 2025 EPSS Score
Nov 27, 2025 EPSS Score
Dec 2, 2025 EPSS Score
Dec 6, 2025 EPSS Score
Dec 11, 2025 EPSS Score

References

Open in Interactive Console →