PT-2025-45395 · Microsoft+4 · Edge+4

Published 2025-09-25 · Updated 2025-12-17 · CVE-2025-12726

Positive Technologies · (AI Summary)

CVSS v3.1

7.5

High

AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome (affected versions not specified)

Description An issue in Google Chrome may allow attackers to affect the system. The root cause is an inappropriate implementation in Views. This affects Microsoft Edge (Chromium-based) as it ingests Chromium.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Memory Leak

Improper Privilege Management

Weakness Enumeration

CWE-401

CWE-269

Related Identifiers

ALT-PU-2025-14702

BDU:2025-13847

CVE-2025-12726

DSA-6050-1

OPENSUSE-SU-2025:15720-1

OPENSUSE-SU-2025:20037-1

Affected Products

Alt Linux

Debian

Google Chrome

Edge

Red Os

References · 26

• https://security-tracker.debian.org/tracker/CVE-2025-12726 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-13847 · Security Note
• https://osv.dev/vulnerability/CVE-2025-12726 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:20037-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15720-1 · Vendor Advisory
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://osv.dev/vulnerability/DSA-6050-1 · Vendor Advisory
• https://chromereleases.googleblog.com/2025/11/stable-channel-update-for-desktop.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-12726 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-12726 · Vendor Advisory
• https://t.me/msrcreports/2267 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1988024762900136322 · Twitter Post
• https://twitter.com/CVEnew/status/1987984638007021995 · Twitter Post
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/uyazvimost-chromium-cve-2025-12726-7.3 · Note
• https://suse.com/security/cve/CVE-2025-12725 · Note