VULNERABILITY INTELLIGENCE

CVE-2025-13635

CVSS score4.4 MEDIUM

EPSS probability0.18%

CISA KEVNot currently listed

Published2025-12-02

Last modified2026-09-25

Description

Inappropriate implementation in Downloads in Google Chrome prior to 143.0.7499.41 allowed a local attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)