UI Spoofing Vulnerability in Google Chrome Affects Users’ Security
CVE-2025-12446

4.2MEDIUM

Key Information:

Vendor

Google
Status
Chrome
Vendor
CVE Published:
10 November 2025

What is CVE-2025-12446?

A vulnerability has been identified in Google Chrome that allows a remote attacker to exploit incorrect security user interface implementations. By convincing users to perform specific gestures on a crafted domain name, the attacker can manipulate the UI, leading to potential phishing or deceptive practices. It highlights the importance of keeping browsers updated and being cautious of unusual interface changes.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Chrome 142.0.7444.59

References

https://chromereleases.googleblog.com/2025/10/stable-chan...
https://issues.chromium.org/issues/444932667

CVSS V3.1

Score:
4.2
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.