CVE-2025-46452

Summary

CVE-2025-46452 is a Cross-Site Request Forgery (CSRF) vulnerability affecting Google News. An attacker could exploit this issue to perform malicious actions on a user's behalf, such as modifying their account settings or stealing sensitive information. Additionally, the vulnerability allows for Stored XSS (Cross-Site Scripting) attacks, which can inject malicious scripts into web pages viewed by other users. Google News versions from n/a through 2.5.1 are affected by this issue. Users are advised to update their software as soon as possible to mitigate the risk of exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.