Inappropriate Implementation in App-Bound Encryption of Google Chrome

CVE-2025-12439

What is CVE-2025-12439?

An inappropriate implementation in the App-Bound Encryption feature of Google Chrome on Windows prior to version 142.0.7444.59 could allow a local attacker to exploit this flaw. By utilizing a malicious file, the attacker could potentially gain access to sensitive information from the process memory, leading to serious privacy concerns. Ensuring that users are updated to the latest version of Chrome is crucial for mitigating this risk.

References