CVE-2025-8581

Google Chrome versions prior to 139.0.7258.66 are vulnerable to a cross-site scripting (XSS) issue caused by an inappropriate implementation in the Extensions component. A remote attacker can exploit this by tricking a user into performing specific UI gestures on a crafted HTML page, leading to t...