CVE-2025-13107 — Vulnetix

Try Vulnetix Request Demo

CVE-2025-13107 PUBLISHED CVSS 4.300000190734863 MEDIUM

Inappropriate implementation in Compositing in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

EPSS 0.14% · 33.3th percentile

Risk Scores

CVSS v3.1

4.300000190734863

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

EPSS Score

0.14%

33.3th percentile

Affected Products

Vendor	Product	Versions
google	chrome	0
Google	Chrome	140.0.7339.80

Timeline

Nov 14, 2025 EPSS Score
Nov 14, 2025 Coalition ESS Score
Nov 14, 2025 CVE Published
Nov 14, 2025 PoC Published
Nov 14, 2025 PoC Published
Nov 15, 2025 Coalition ESS Score
Nov 16, 2025 Coalition ESS Score
Nov 17, 2025 Coalition ESS Score
Nov 19, 2025 EPSS Score
Nov 20, 2025 Coalition ESS Score
Nov 23, 2025 EPSS Score
Nov 28, 2025 EPSS Score

References

Open in Interactive Console →