Improperly implemented security check for standard in Google Chromium - CVE-2025-0996
Published: February 12, 2025 / Updated: February 12, 2025
Vulnerability identifier: #VU103929
CSH Severity: Medium
CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Green
CVE-ID: CVE-2025-0996
CWE-ID: CWE-358
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Affected software:
Google Chromium
Microsoft Edge
Google Chrome
Prisma Access Browser
Debian Linux
Fedora
chromium
chromium (Debian package)
Google Chromium
Microsoft Edge
Google Chrome
Prisma Access Browser
Debian Linux
Fedora
chromium
chromium (Debian package)
Detailed vulnerability description
The vulnerability allows a remote attacker to compromise the affected system.
The vulnerability exists due to incorrect implementation in Browser UI in Google Chrome. A remote attacker can create a specially crafted web page, trick the victim into visiting it and compromise the system.
How to mitigate CVE-2025-0996
Install update from vendor's website.