Insufficient Data Validation in Google Chrome Affects User Security
CVE-2025-4051
6.3MEDIUM
Summary
A security flaw has been identified in Google Chrome, originating from inadequate data validation within DevTools. This vulnerability allows a remote attacker to exploit the flaw by persuading a user to perform certain UI interactions. By leveraging a specifically crafted HTML page, attackers can bypass discretionary access controls, posing a significant risk to user privacy and security.
Affected Version(s)
Chrome 136.0.7103.59
References
CVSS V3.1
Score:
6.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved