CVE-2025-12910 — Vulnetix

CVE-2025-12910 PUBLISHED CVSS 6.900000095367432 MEDIUM

Inappropriate implementation in Passkeys in Google Chrome prior to 140.0.7339.80 allowed a local attacker to obtain potentially sensitive information via debug logs. (Chromium security severity: Low)

EPSS 0.01% · 0.9th percentile

Risk Scores

CVSS 4.0

6.900000095367432

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

EPSS Score

0.01%

0.9th percentile

Affected Products

Vendor	Product	Versions
google	chrome	0
Google	Chrome	140.0.7339.80

Exploit Intelligence

https://issues.chromium.org/issues/434977743 (nist-nvd)
CIRCL seen: CVE-2025-12910 (circl-sighting)
https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop.html (circl)

Timeline

Nov 7, 2025 CVE Published
Nov 8, 2025 EPSS Score
Nov 8, 2025 Coalition ESS Score
Nov 8, 2025 PoC Published
Nov 13, 2025 EPSS Score
Nov 19, 2025 EPSS Score
Nov 21, 2025 CVE Updated
Nov 24, 2025 EPSS Score
Nov 28, 2025 Coalition ESS Score
Nov 29, 2025 EPSS Score
Dec 1, 2025 Coalition ESS Score
Dec 4, 2025 EPSS Score

References

Open in Interactive Console →