Vulnerability Bulletins |
CVE-2025-8577 |
|
| Affected software | |
| Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2025-8577 | |