PT-2025-46937 · Google+2 · Google Chrome+2

Published 2025-07-03 · Updated 2025-12-02 · CVE-2025-13107

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 140.0.7339.80

Description An issue in Compositing within Google Chrome, prior to version 140.0.7339.80, could allow a remote attacker to perform UI spoofing through a specially designed HTML page. This is due to an inappropriate implementation in the Compositing component.

Recommendations Update Google Chrome to version 140.0.7339.80 or later.

Exploit

Fix

UI Misrepresentation of Critical Information

Weakness Enumeration

CWE-451

Related Identifiers

BDU:2025-14878

CVE-2025-13107

DSA-5993-1

Affected Products

Debian

Google Chrome

Red Os

References · 18

• 🔥 https://issues.chromium.org/issues/429440615 · Exploit
• https://bdu.fstec.ru/vul/2025-14878 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2025-13107 · Vendor Advisory
• https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop.html · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20251225SE16 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-13107 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-13107 · Security Note
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-1113SE18 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-1216SE189 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-1202SE17 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-13107 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5993-1 · Vendor Advisory
• https://twitter.com/CVEnew/status/1989194822427767275 · Twitter Post
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-chromium-02122025 · Note
• https://twitter.com/VulmonFeeds/status/1989291887610454315 · Twitter Post