CVE-2025-12907 — Vulnetix

Try Vulnetix Request Demo

CVE-2025-12907 PUBLISHED CVSS 9.300000190734863 CRITICAL

Insufficient validation of untrusted input in Devtools in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to execute arbitrary code via user action in Devtools. (Chromium security severity: Low)

EPSS 0.26% · 49.1th percentile

Risk Scores

CVSS v4.0

9.300000190734863

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

EPSS Score

0.26%

49.1th percentile

Affected Products

Vendor	Product	Versions
google	chrome	0
Google	Chrome	140.0.7339.80

Timeline

Nov 7, 2025 CVE Published
Nov 8, 2025 EPSS Score
Nov 8, 2025 Coalition ESS Score
Nov 8, 2025 PoC Published
Nov 10, 2025 PoC Published
Nov 13, 2025 EPSS Score
Nov 17, 2025 EPSS Score
Nov 22, 2025 EPSS Score
Nov 27, 2025 EPSS Score
Dec 1, 2025 Coalition ESS Score
Dec 2, 2025 EPSS Score
Dec 6, 2025 EPSS Score

References

Open in Interactive Console →