Cross-Origin Data Exposure in Google Chrome by Google

CVE-2025-8881

What is CVE-2025-8881?

A vulnerability in the File Picker feature of Google Chrome prior to version 139.0.7258.127 could allow a remote attacker to exploit specific UI gestures, leading to the leakage of cross-origin data through a specially crafted HTML page. This exposure could facilitate unauthorized access to sensitive information, underscoring the importance of using updated versions of the browser to mitigate such risks.

References