PT-2025-9738 · Google+3 · Google Chrome+3

Khalil Zhani · Publicado 2025-03-04 · Atualizado 2025-04-03 · CVE-2025-1917

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 134.0.6998.35

Description The issue is related to an inappropriate implementation in the Browser UI, allowing a remote attacker to perform UI spoofing via a crafted HTML page. The severity of this issue is classified as Medium.

Recommendations For versions prior to 134.0.6998.35, update to version 134.0.6998.35 or later to resolve the issue.

Exploit

Correção

Clickjacking

Enumeração de Fraquezas

CWE-1021

Identificadores relacionados

ALT-PU-2025-4164

ALT-PU-2025-4366

BDU:2025-02672

CVE-2025-1917

DSA-5875-1

MGASA-2025-0091

OPENSUSE-SU-2025:0084-1

OPENSUSE-SU-2025:14854-1

Produtos afetados

Alt Linux

Debian

Google Chrome

Red Os

Referências · 66

• 🔥 https://github.com/ading2210/CVE-2024-6778-POC · Exploit
• 🔥 https://github.com/bi-zone/CVE-2024-7965 · Exploit
• 🔥 https://github.com/XiaomingX/cve-2024-7965-poc · Exploit
• 🔥 https://github.com/r00tjunip3r1/POC-CVE-2024-6778 · Exploit
• https://twitter.com/windowsforum/status/1899582807132799426 · Publicação no Twitter
• https://bdu.fstec.ru/vul/2025-02672 · Nota de Segurança
• https://suse.com/security/cve/CVE-2025-1922 · Nota
• https://security.paloaltonetworks.com/PAN-SA-2025-0007 · Nota
• https://osv.dev/vulnerability/DSA-5875-1 · Aviso do Fabricante
• https://twitter.com/windowsforum/status/1899311869178921081 · Publicação no Twitter
• https://twitter.com/windowsforum/status/1899495679296180533 · Publicação no Twitter
• https://xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/3.1 · Nota
• https://suse.com/security/cve/CVE-2025-1919 · Nota
• https://lists.opensuse.org/archives/list/[e-mail]/thread/RXNDPKOASMYM2SMWNDENDFTKUIT4CM4A · Nota
• https://twitter.com/windowsforum/status/1899327002357735445 · Publicação no Twitter