UI Spoofing Vulnerability in Google Chrome on Android
CVE-2025-12728

4.2MEDIUM

Key Information:

Vendor

Google
Status
Chrome
Vendor
CVE Published:
10 November 2025

What is CVE-2025-12728?

A vulnerability has been identified in Google Chrome for Android prior to version 142.0.7444.137 that enables remote attackers to exploit the Omnibox, allowing them to perform UI spoofing. This is executed through the manipulation of specific user interface gestures, which can be triggered by misleading HTML pages. Users should remain vigilant against such attacks and ensure their browser is updated to the latest version to mitigate these risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Chrome 142.0.7444.137

References

https://chromereleases.googleblog.com/2025/11/stable-chan...
https://issues.chromium.org/issues/452392032

CVSS V3.1

Score:
4.2
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.