Insufficient validation of untrusted input in Devtools in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to execute arbitrary code via user action in Devtools. (Chromium security severity: Low)
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Fri, 07 Nov 2025 23:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Insufficient validation of untrusted input in Devtools in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to execute arbitrary code via user action in Devtools. (Chromium security severity: Low) | |
| Weaknesses | CWE-20 | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: Chrome
Published:
Updated: 2025-11-07T23:23:37.805Z
Reserved: 2025-11-07T23:22:38.213Z
Link: CVE-2025-12907
Vulnrichment
No data.
NVD
Status : Received
Published: 2025-11-08T00:15:35.443
Modified: 2025-11-08T00:15:35.443
Link: CVE-2025-12907
Redhat
No data.
OpenCVE Enrichment
No data.