Insufficient Data Validation in Google Chrome Affects User Security
CVE-2025-4051

6.3MEDIUM

Key Information:

Vendor

Google
Status
Chrome
Vendor
CVE Published:
5 May 2025

What is CVE-2025-4051?

A security flaw has been identified in Google Chrome, originating from inadequate data validation within DevTools. This vulnerability allows a remote attacker to exploit the flaw by persuading a user to perform certain UI interactions. By leveraging a specifically crafted HTML page, attackers can bypass discretionary access controls, posing a significant risk to user privacy and security.

Affected Version(s)

Chrome 136.0.7103.59

References

https://chromereleases.googleblog.com/2025/04/stable-chan...
https://issues.chromium.org/issues/404000989

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.