Vulnerability Bulletins

CVE-2025-9866

   
Affected software GOOGLE
 
Inappropriate implementation in Extensions in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Medium)

Link:

https://nvd.nist.gov/vuln/detail/CVE-2025-9866