Local Attack Vulnerability in Google Chrome Downloads Feature
CVE-2025-13634

4.4MEDIUM

Key Information:

Vendor

Google
Status
Chrome
Vendor
CVE Published:
2 December 2025

What is CVE-2025-13634?

A security vulnerability exists in the Downloads feature of Google Chrome for Windows, which allows a local attacker to circumvent the 'mark of the web' protection through specifically crafted HTML pages. This flaw can result in unintended access to files that should be protected, emphasizing the need for users to remain vigilant and keep their software up-to-date.

Affected Version(s)

Chrome 143.0.7499.41

References

https://chromereleases.googleblog.com/2025/12/stable-chan...
https://issues.chromium.org/issues/429140219

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-13634 : Local Attack Vulnerability in Google Chrome Downloads Feature