CVE-2025-0440
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Jan 15, 2025
CWE ID 290
Summary
CVE-2025-0440 is a medium severity vulnerability affecting Google Chrome on Windows versions prior to 132.0.6834.83. An inappropriate implementation in the Fullscreen feature allowed a remote attacker to execute UI spoofing through a carefully crafted HTML page. This issue may lead to deceiving users into divulging sensitive information or taking unwarranted actions. Despite the medium severity rating, it is essential to update Chrome to the latest version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.