5.4
/ 10
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Description
Inappropriate implementation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
Basic Information
ID
CVE-2025-13097
Source
Chrome
Published
Nov 14, 2025 at 02:29
Modified
Nov 14, 2025 at 14:44
Affected Product
Vendor
Google
Product
Chrome
Version
136.0.7103.59
Affected Versions
Google Chrome 136.0.7103.59