CVE-2025-3070
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Apr 2, 2025
Updated: Apr 7, 2025
CWE ID 1287
CWE ID 20
Summary
CVE-2025-3070 is a medium severity vulnerability affecting Google Chrome versions prior to 135.0.7049.52. An attacker can exploit this issue by crafting a malicious HTML page and using insufficient input validation in Chrome extensions. This allows the attacker to perform privilege escalation, potentially gaining unauthorized access to user data or performing unintended actions on behalf of the user. This vulnerability should be addressed by updating to the latest version of Google Chrome to ensure security.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.