PT-2025-32250 · Google+4 · Google Chrome+4

Published 2017-10-31 · Updated 2025-11-10 · CVE-2025-8582

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 139.0.7258.66

Description A lack of proper validation of untrusted input within the Core component of Google Chrome permitted a remote attacker to manipulate the Omnibox (URL bar) display through a specially crafted HTML page. The security severity of this issue is rated as Low.

Recommendations Update Google Chrome to version 139.0.7258.66 or later.

Fix

UI Misrepresentation of Critical Information

RCE

Weakness Enumeration

CWE-451

CWE-20

Related Identifiers

ALT-PU-2025-10850

BDU:2025-09454

CVE-2025-8582

DSA-5971-1

DSA-5976-1

OPENSUSE-SU-2025:15421-1

Affected Products

Alt Linux

Astra Linux

Debian

Google Chrome

Red Os

References · 36

• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-1020SE47 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0923SE17 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-8582 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-8582 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-8582 · Security Note
• https://osv.dev/vulnerability/DSA-5971-1 · Vendor Advisory
• https://chromereleases.googleblog.com/2025/08/stable-channel-update-for-desktop.html · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20251225SE16 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-8582 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5976-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-1113SE18 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-8582 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2025:15421-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-09454 · Security Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-chromium-10112025 · Note