CVE-2025-13992
Medium · 4.7CVSS
4.7
EPSS
0.2%
Published
Dec 3, 2025
CISA due date
—
The record
Side-channel information leakage in Navigation and Loading in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|