Home

Description

Insufficient validation of untrusted input in Devtools in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to execute arbitrary code via user action in Devtools. (Chromium security severity: Low)

PUBLISHED Reserved 2025-11-07 | Published 2025-11-07 | Updated 2025-11-14 | Assigner Chrome

Problem types

Insufficient validation of untrusted input

Product status

140.0.7339.80 (custom) before 140.0.7339.80
affected

References

chromereleases.googleblog.com/...nel-update-for-desktop.html

issues.chromium.org/issues/427367145

cve.org (CVE-2025-12907)

nvd.nist.gov (CVE-2025-12907)

Download JSON

Data based on CVE®. Copyright © 1999-2025, The MITRE Corporation. All rights reserved.