CVE-2025-12435
Medium · 5.4CVSS
5.4
EPSS
0.3%
Published
Nov 10, 2025
CISA due date
—
The record
Incorrect security UI in Omnibox in Google Chrome on Android prior to 142.0.7444.59 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| openSUSE:Tumbleweed | chromium | 0 | 142.0.7444.59-2.1 |
Related vulnerabilities
- CVE-2026-14137 Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS… Also affects chromium
- CVE-2026-14140 Insufficient validation of untrusted input in Input in Google Chrome on Android prior to… Also affects chromium
- CVE-2026-14141 Incorrect security UI in Document Picture-in-Picture in Google Chrome on Android prior to… Also affects chromium
- CVE-2026-14126 Incorrect security UI in UI in Google Chrome on Android prior to 150.0.7871.47 allowed a… Also affects chromium
- CVE-2026-14124 Inappropriate implementation in CredentialProvider in Google Chrome on Windows prior to… Also affects chromium
- CVE-2026-14134 Inappropriate implementation in Autofill in Google Chrome on Android prior to… Also affects chromium
- CVE-2026-14114 Inappropriate implementation in WebAppInstalls in Google Chrome on Android prior to… Also affects chromium
- CVE-2026-14080 Insufficient validation of untrusted input in TabSwitcher in Google Chrome on Android… Also affects chromium