PT-2025-44676 · Google+4 · Chromium+5

Published 2025-10-10 · Updated 2025-12-16 · CVE-2025-12429

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Chromium (affected versions not specified)

Description An issue exists in Google Chrome due to an inappropriate implementation in V8, potentially allowing attackers to affect the system. Microsoft Edge (Chromium-based) is also impacted as it ingests Chromium.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improperly Implemented Security Check for Standard

Weakness Enumeration

CWE-358

Related Identifiers

ALT-PU-2025-14702

AZL-70036

BDU:2025-14019

CVE-2025-12429

DSA-6046-1

OPENSUSE-SU-2025:15687-1

Affected Products

Alt Linux

Chromium

Debian

Google Chrome

Edge

Red Os

References · 48

• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2026-0224SE18 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2025-12429 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-70036 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-12429 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-12429 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-1216SE168 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-12429 · Security Note
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-14019 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2025:15687-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20251225SE16 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-6046-1 · Vendor Advisory
• https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_28.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-12429 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-1202SE17 · Vendor Advisory