Insufficient validation of untrusted input in Downloads in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Low)
Metrics
Affected Vendors & Products
No data.
No data.
No data.
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Fri, 07 Nov 2025 23:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Insufficient validation of untrusted input in Downloads in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Low) | |
| Weaknesses | CWE-20 | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: Chrome
Published:
Updated: 2025-11-07T23:23:38.329Z
Reserved: 2025-11-07T23:22:38.587Z
Link: CVE-2025-12908
Vulnrichment
No data.
NVD
Status : Received
Published: 2025-11-08T00:15:35.583
Modified: 2025-11-08T00:15:35.583
Link: CVE-2025-12908
Redhat
No data.
OpenCVE Enrichment
No data.