Home

Description

Insufficient policy enforcement in Devtools in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to leak cross-origin data via Devtools. (Chromium security severity: Low)

PUBLISHED Reserved 2025-11-07 | Published 2025-11-07 | Updated 2025-11-07 | Assigner Chrome

Problem types

Insufficient policy enforcement

Product status

140.0.7339.80 (custom) before 140.0.7339.80
affected

References

chromereleases.googleblog.com/...nel-update-for-desktop.html

issues.chromium.org/issues/361116749

cve.org (CVE-2025-12909)

nvd.nist.gov (CVE-2025-12909)

Download JSON