Security Advisory

CVE-2025-12445

6.5
MEDIUM

Vulnerability Description

Policy bypass in Extensions in Google Chrome prior to 142.0.7444.59 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. (Chromium security severity: Low)
Published Date November 10, 2025
Official Source NIST NVD Advisory