Inappropriate Implementation in Google Chrome DevTools Enables Sandbox Escape
CVE-2025-13632

5.4MEDIUM

Key Information:

Vendor

Google
Status
Chrome
Vendor
CVE Published:
2 December 2025

What is CVE-2025-13632?

A security issue in Google Chrome prior to version 143.0.7499.41 was identified within the DevTools component. The flaw could potentially allow an attacker to execute a sandbox escape if a user were to install a malicious Chrome extension. This vulnerability emphasizes the importance of cautious extension installations and maintaining up-to-date browser versions to mitigate risks.

Affected Version(s)

Chrome 143.0.7499.41

References

https://chromereleases.googleblog.com/2025/12/stable-chan...
https://issues.chromium.org/issues/439058242

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-13632 : Inappropriate Implementation in Google Chrome DevTools Enables Sandbox Escape