CVE-2025-3068
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Apr 2, 2025
Updated: Apr 7, 2025
CWE ID 20
Summary
CVE-2025-3068 is a medium severity vulnerability affecting Google Chrome on Android before version 135.0.7049.52. The issue stems from an inappropriate implementation in Intents, which allows a remote attacker to execute privilege escalation through a specially crafted HTML page. By leveraging this vulnerability, an adversary can gain elevated access to the system, potentially leading to further exploitation and unauthorized actions. Users are strongly advised to update their Google Chrome browsers to the latest version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.