UI Spoofing Vulnerability in Google Chrome
CVE-2025-13635

4.4MEDIUM

Key Information:

Vendor

Google
Status
Chrome
Vendor
CVE Published:
2 December 2025

What is CVE-2025-13635?

A security weakness in Google Chrome's Downloads feature prior to version 143.0.7499.41 allows local attackers to manipulate the user interface using a specially crafted HTML page. This vulnerability can lead to misleading information being presented to users, potentially compromising user trust and security practices.

Affected Version(s)

Chrome 143.0.7499.41

References

https://chromereleases.googleblog.com/2025/12/stable-chan...
https://issues.chromium.org/issues/405727341

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-13635 : UI Spoofing Vulnerability in Google Chrome