> CVE-2025-11210

« BACK_TO_HOME
PUBLISHED
2025-11-06 22:15
MODIFIED
2025-11-06 22:15
EPSS (Prob. Exploit)
0.23%
Top 85.7%
DATA SOURCES:
NVD 🔗 2025-11-06 CVE PROJECT 🔗 2026-01-19 CWE MITRE 🔗 2026-11-01 FIRST EPSS 🔗 2026-11-08 OSV 🔗 2026-11-08 MSRC 🔗 2026-09-01

> DESCRIPTION

Side-channel information leakage in Tab in Google Chrome prior to 141.0.7390.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> WEAKNESSES

CWE-1300

> CWE DETAILED DESCRIPTIONS

CWE-1300: Improper Protection of Physical Side Channels - The device does not contain sufficient protection mechanisms to prevent physical side channels from exposing sensitive information due to patterns in physically observable phenomena such as variations in power consumption, electromagnetic emissions (EME), or acoustic emissions.

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

AFFECTED PACKAGES:
Unknown / Unknown

> HISTORIQUE DES MODIFICATIONS

Première apparition
06/11/2025 22:15
Source: NVD
📊 ENRICHISSEMENT 19/01/2026 17:36
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
📊 ENRICHISSEMENT 01/12/2025 06:01
CWE
Champ modifié: Description CWE
Ancienne valeur:
N/A
Nouvelle valeur:
CWE-1300: Improper Protection of Physical Side Channels - The device does not contain sufficient protection mechanisms to prevent physical side channels from exposing sensitive information due to pa...
Total des modifications: 2 Dernière mise à jour: 9 months ago

> REFERENCES

https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_...
https://issues.chromium.org/issues/440523110
« BACK_TO_HOME