7.5
/ 10
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
Use after free in PageInfo in Google Chrome prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
Basic Information
ID
CVE-2025-12437
Source
Chrome
Published
Nov 10, 2025 at 20:00
Modified
Nov 12, 2025 at 17:09
Affected Product
Vendor
Google
Product
Chrome
Version
142.0.7444.59
Affected Versions
Google Chrome 142.0.7444.59