Home

Description

Insufficient validation of untrusted input in Downloads in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Low)

PUBLISHED Reserved 2025-11-07 | Published 2025-11-07 | Updated 2025-11-10 | Assigner Chrome

Problem types

Insufficient validation of untrusted input

Product status

140.0.7339.80 (custom) before 140.0.7339.80
affected

References

chromereleases.googleblog.com/...nel-update-for-desktop.html

issues.chromium.org/issues/421511847

cve.org (CVE-2025-12908)

nvd.nist.gov (CVE-2025-12908)

Download JSON

Data based on CVE®. Copyright © 1999-2025, The MITRE Corporation. All rights reserved.