VDB
CVE-2025-13992
CVE-2025-13992
PUBLISHED
CVSS 4.699999809265137 MEDIUM
Side-channel information leakage in Navigation and Loading in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)
EPSS 0.19% · 8.7th percentile
Risk Scores
CVSS 3.1
4.699999809265137
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
EPSS Score
0.19%
8.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chrome | 0 | |
| Chrome | 139.0.7258.66 |
Timeline
- Dec 3, 2025 CVE ID Reserved
- Dec 3, 2025 CVE Published
- Dec 3, 2025 CVE Updated
- Dec 3, 2025 PoC Published
- Dec 4, 2025 EPSS Score
- Dec 9, 2025 EPSS Score
- Dec 13, 2025 EPSS Score
- Dec 18, 2025 EPSS Score
- Dec 22, 2025 EPSS Score
- Dec 27, 2025 EPSS Score
- Dec 31, 2025 EPSS Score
- Jan 5, 2026 EPSS Score