CVE-2025-13640 — Storing Passwords in a Recoverable Format in Google Chrome
Severity
3.5LOWNVD
EPSS
0.0%
top 94.75%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 2
Latest updateDec 17
Description
Inappropriate implementation in Passwords in Google Chrome prior to 143.0.7499.41 allowed a local attacker to bypass authentication via physical access to the device. (Chromium security severity: Low)
CVSS vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:NExploitability: 0.9 | Impact: 2.5
Affected Packages3 packages
🔴Vulnerability Details
3OSV
▶
CVEList
▶
GHSA▶
GHSA-68ww-h25v-g8mq: Inappropriate implementation in Passwords in Google Chrome prior to 143↗2025-12-02
📋Vendor Advisories
4Debian▶
CVE-2025-13640: chromium - Inappropriate implementation in Passwords in Google Chrome prior to 143.0.7499.4...↗2025