Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Google Chrome 140.0.7339.80 Clear all filters
TI-2025-09051 CVE-2025-9866 · GHSA-5g75-w57p-pj3x

Protection mechanism failure in Google Chrome

Priority MEDIUM 41

Inappropriate implementation in Extensions in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to bypass content security policy via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00507 Published 2025-09-03 Fixed in 140.0.7339.80 CWE-693
TI-2025-09050 CVE-2025-9865

Inappropriate implementation in Toolbar in Google Chrome on Android prior to…

Priority LOW 24

Inappropriate implementation in Toolbar in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform domain spoofing via a crafted HTML pa…

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.0027 Published 2025-09-03 Fixed in 140.0.7339.80 CWE-451