Authentication Bypass by Spoofing
CVE-2025-13635
Summary
Inappropriate implementation in Downloads in Google Chrome prior to 143.0.7499.41 allowed a local attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
- LOW
- LOCAL
- NONE
- UNCHANGED
- REQUIRED
- NONE
- LOW
- LOW
CWE-290 - Authentication Bypass by Spoofing
This attack-focused weakness is caused by improperly implemented authentication schemes that are subject to spoofing attacks.
Advisory Timeline
- Published
