CVE-2025-8581

CVE-2025-8581 affects Google Chrome/Chromium where an inappropriate Extension implementation prior to 139.0.7258.66 can allow a remote attacker—who lures a user into specific UI gestures via a crafted HTML page—to leak cross-origin data. The CVSS 3.1 base score is 4.3 (Medium); impact is limited ...