PT-2025-3890 · Google+4 · Google Chrome+4

Alesandro Ortiz + 1 · Published 2025-02-04 · Updated 2025-03-19 · CVE-2025-0451

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 133.0.6943.53

Description The issue is related to an inappropriate implementation in the Extensions API, allowing a remote attacker to perform UI spoofing via a crafted Chrome Extension if the user is convinced to engage in specific UI gestures.

Recommendations For versions prior to 133.0.6943.53, update to version 133.0.6943.53 or later to resolve the issue.

Fix

UI Misrepresentation of Critical Information

Weakness Enumeration

CWE-451

Related Identifiers

ALT-PU-2025-2744

ALT-PU-2025-4366

BDU:2025-02318

CVE-2025-0451

DSA-5859-1

MGASA-2025-0091

OPENSUSE-SU-2025:0058-1

OPENSUSE-SU-2025:14742-1

Affected Products

Alt Linux

Astra Linux

Debian

Google Chrome

Red Os

References · 37

• https://osv.dev/vulnerability/openSUSE-SU-2025:14742-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:0058-1 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2025-0091.html · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-0451 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-0451 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-0811SE18 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-0451 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0923SE17 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2025-0091 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-0451 · Security Note
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20251225SE16 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-02318 · Security Note
• https://osv.dev/vulnerability/DSA-5859-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-0422SE47 · Vendor Advisory
• https://suse.com/security/cve/CVE-2025-0445 · Note