Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

Release: Google Chrome 139.0.7258.66 Clear all filters
TI-2025-07859 CVE-2025-8582 · GHSA-hw6w-3wvx-7pvx

Improper input validation in Google Chrome

Priority LOW 20

Insufficient validation of untrusted input in Core in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00258 Published 2025-08-07 Fixed in 139.0.7258.66 CWE-20
TI-2025-07858 CVE-2025-8581 · GHSA-4crv-j7p5-3hm3

Cross-site scripting in Google Chrome

Priority LOW 20

Inappropriate implementation in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00298 Published 2025-08-07 Fixed in 139.0.7258.66 CWE-79
TI-2025-07857 CVE-2025-8580 · GHSA-rqrq-62q7-xjm8

Cross-site scripting in Google Chrome

Priority LOW 20

Inappropriate implementation in Filesystems in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to perform UI spoofing via a crafted HTML page.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00261 Published 2025-08-07 Fixed in 139.0.7258.66 CWE-79
TI-2025-07856 CVE-2025-8579 · GHSA-g7r4-2rj5-x8v8

Cross-site scripting in Google Chrome

Priority LOW 20

Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00261 Published 2025-08-07 Fixed in 139.0.7258.66 CWE-79
TI-2025-07855 CVE-2025-8578 · GHSA-cfw9-x6x8-wjgw

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Cast in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00358 Published 2025-08-07 Fixed in 139.0.7258.66 CWE-416
TI-2025-07854 CVE-2025-8577 · GHSA-w6w7-jcjp-vp4q

Cross-site scripting in Google Chrome

Priority LOW 20

Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00261 Published 2025-08-07 Fixed in 139.0.7258.66 CWE-79
TI-2025-07853 CVE-2025-8576 · GHSA-8vwm-wmwm-x9cm

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00343 Published 2025-08-07 Fixed in 139.0.7258.66 CWE-416