Inappropriate Implementation in Google Chrome Extensions by Google

CVE-2025-12431

What is CVE-2025-12431?

A flaw in the implementation of Extensions in Google Chrome versions prior to 142.0.7444.59 could be exploited by an attacker. If a user is tricked into installing a malicious extension, the attacker could bypass critical navigation restrictions, compromising the browser's security framework. This vulnerability highlights the importance of scrutinizing the extensions installed and maintaining up-to-date software to mitigate potential risks.

References