CVE-2025-34091

creationtimestamp| type| source ---|---|--- 2025-07-02 21:13:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsz4ylr4o62q...

CVE-2025-34091

CVE-2025-34091 describes a padding oracle vulnerability in Google Chrome’s AppBound cookie encryption, due to DPAPI decryption error reporting in Windows Event Logs. A local attacker can send malformed SYSTEM-DPAPI ciphertext to Chrome’s elevation service, distinguish padding vs MAC errors, and p...