CVE-2025-9865: Inappropriate implementation in Toolbar
Chromium: CVE-2025-9865 Inappropriate implementation in Toolbar
Other sources
Inappropriate implementation in Toolbar in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform domain spoofing via a crafted HTML page. (Chromium security severity: Medium)
— MITRE
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
— Microsoft
Credit
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2025-9865?
The severity of CVE-2025-9865 is classified as Medium by Chromium security.
How do I fix CVE-2025-9865?
To fix CVE-2025-9865, update Google Chrome on Android to version 140.0.7339.80 or later.
What types of attacks are possible with CVE-2025-9865?
CVE-2025-9865 allows for domain spoofing through specific UI gestures performed by the user.
Which versions of Google Chrome are affected by CVE-2025-9865?
CVE-2025-9865 affects Google Chrome on Android versions prior to 140.0.7339.80.
Is user interaction required for exploiting CVE-2025-9865?
Yes, user interaction is necessary to exploit CVE-2025-9865, as it requires engaging in specific UI gestures.