VULNERABILITY INTELLIGENCE

CVE-2025-0442

CVSS score6.5 MEDIUM

EPSS probability0.33%

CISA KEVNot currently listed

Published2025-01-15

Last modified2026-06-17

Description

Inappropriate implementation in Payments in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)