CVE-2025-8577 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2025-8577

A flaw was found in the Picture-in-Picture component of Google Chrome. This vulnerability allows a remote attacker who convinces a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page...

CVE-2025-8577

Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-8577

Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-8577

Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-8577

creationtimestamp| type| source ---|---|--- 2025-08-07 01:55:52+00:00| seen| Telegram/TWOvwNyq9WZgJrK7NFWoWzTEKyXKbyW9tlBgZnDKP8BVf0...

Google Chrome < 139.0.7258.66 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 139.0.7258.66. It is, therefore, affected by multiple vulnerabilities as referenced in the 202508stable-channel-update-for-desktop advisory. - Use after free in Cast in Google Chrome prior to 139.0.7258.66 allowed a...

Google Chrome < 139.0.7258.66 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 139.0.7258.66. It is, therefore, affected by multiple vulnerabilities as referenced in the 202508stable-channel-update-for-desktop advisory. - Use after free in Cast in Google Chrome prior to 139.0.7258.66 allowed a remot...