Inappropriate Implementation in Google Chrome Extensions by Google
CVE-2025-12431

6.5MEDIUM

Key Information:

Vendor

Google
Status
Chrome
Vendor
CVE Published:
10 November 2025

What is CVE-2025-12431?

A flaw in the implementation of Extensions in Google Chrome versions prior to 142.0.7444.59 could be exploited by an attacker. If a user is tricked into installing a malicious extension, the attacker could bypass critical navigation restrictions, compromising the browser's security framework. This vulnerability highlights the importance of scrutinizing the extensions installed and maintaining up-to-date software to mitigate potential risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Chrome 142.0.7444.59

References

https://chromereleases.googleblog.com/2025/10/stable-chan...
https://issues.chromium.org/issues/436887350

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.