PT-2025-27673 · Google · Google Chrome

Ari Novick · Published 2025-07-02 · Updated 2025-07-02 · CVE-2025-34092

Positive Technologies (AI Summary)

CVSS v4.0

9.3

Critical

Base vector

AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions: Google Chrome (affected versions not specified)

Description: A cookie encryption bypass issue exists due to weak path validation logic within the elevation service of Google Chrome's AppBound mechanism. This allows an attacker to impersonate Chrome by naming their binary similarly and placing it in a similar path, thus retrieving the encrypted cookie key. This enables malicious processes to access cookies intended to be restricted to the Chrome process only.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Authentication Bypass by Spoofing

Weakness Enumeration

CWE-287

CWE-706

CWE-290

Related Identifiers

BDU:2025-09938

CVE-2025-34092

Affected Products

Google Chrome

References · 8

• https://bdu.fstec.ru/vul/2025-09938 · Security Note
• https://cve.org/CVERecord?id=CVE-2025-34092 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-34092 · Security Note
• https://twitter.com/CVEnew/status/1940495175882571945 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1940542674576003359 · Twitter Post
• https://twitter.com/xvonfers/status/1940505749073154086 · Twitter Post
• https://cyberark.com/resources/threat-research-blog/c4-bomb-blowing-up-chromes-appbound-cookie-encryption · Note
• https://vulncheck.com/advisories/google-chrome-appbound-cookie-encryption · Note