CVE-2025-1922 — User Interface (UI) Misrepresentation of Critical Information in Google Chrome

CWE-451 — User Interface (UI) Misrepresentation of Critical Information7 documents7 sources

Severity

4.3MEDIUMNVD

EPSS

0.2%

top 55.22%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Google Chrome Chromium Paloalto Prisma Browser

Timeline

PublishedMar 5

Latest updateMar 12

Description

Inappropriate implementation in Selection in Google Chrome on Android prior to 134.0.6998.35 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages4 packages

▶CVEListV5google/chrome134.0.6998.35 — 134.0.6998.35

▶NVDgoogle/chrome< 134.0.6998.35

▶Debianchromium/chromium< 134.0.6998.35-1~deb12u1+2

▶Palo Altopaloalto/prisma_browser

🔴Vulnerability Details

GHSA

GHSA-wp6v-66g9-g3f5: Inappropriate implementation in Selection in Google Chrome on Android prior to 134↗2025-03-05

▶

OSV

CVE-2025-1922: Inappropriate implementation in Selection in Google Chrome on Android prior to 134↗2025-03-05

▶

CVEList

CVE-2025-1922: Inappropriate implementation in Selection in Google Chrome on Android prior to 134↗2025-03-05

▶

📋Vendor Advisories

Palo Alto

PAN-SA-2025-0007 Chromium: Monthly Vulnerability Update (March 2025)↗2025-03-12

▶

Microsoft

Chromium: CVE-2025-1922 Inappropriate Implementation in Selection↗2025-03-11

▶

Debian

CVE-2025-1922: chromium - Inappropriate implementation in Selection in Google Chrome on Android prior to 1...↗2025

▶