VDB

DEBIAN-CVE-2025-0443

DEBIAN-CVE-2025-0443 PUBLISHED CVSS 8.800000190734863 HIGH

Insufficient data validation in Extensions in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium)

Risk Scores

CVSS 3.1
8.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Debian:12chromium0, 113.0.5672.126-1, 114.0.5735.106-1
Debian:11chromium125.0.6422.141-1, 139.0.7258.127-2, *
Debian:14chromium0, 0
Debian:13chromium0, 0

Timeline

  • Jan 15, 2025 CVE Published
  • Apr 28, 2026 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›