Insufficient validation of untrusted input in Downloads in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Low)
History

Fri, 07 Nov 2025 23:30:00 +0000

Type Values Removed Values Added
Description Insufficient validation of untrusted input in Downloads in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Low)
Weaknesses CWE-20
References

cve-icon MITRE

Status: PUBLISHED

Assigner: Chrome

Published: 2025-11-07T23:23:38.329Z

Updated: 2025-11-07T23:23:38.329Z

Reserved: 2025-11-07T23:22:38.587Z

Link: CVE-2025-12908

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2025-11-08T00:15:35.583

Modified: 2025-11-08T00:15:35.583

Link: CVE-2025-12908

cve-icon Redhat

No data.