BaseFortify

Publication date: 2025-11-08

Last updated on: 2025-11-21

Assigner: Chrome

Description

Inappropriate implementation in Passkeys in Google Chrome prior to 140.0.7339.80 allowed a local attacker to obtain potentially sensitive information via debug logs. (Chromium security severity: Low)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-08

Last Modified

2025-11-21

Generated

2026-07-06

AI Q&A

2025-11-08

EPSS Evaluated

2026-07-05

NVD

CVE-2025-12910

Affected Vendors & Products

Vendor	Product	Version / Range
google	chrome	to 140.0.7339.80 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-1295	The product fails to adequately prevent the revealing of unnecessary and potentially sensitive system information within debugging messages.

Attack-Flow Graph

Executive Summary

This vulnerability is due to an inappropriate implementation in the Passkeys feature of Google Chrome versions prior to 140.0.7339.80. It allows a local attacker to access potentially sensitive information through debug logs.

Impact Analysis

The vulnerability could allow a local attacker to obtain sensitive information from your system via debug logs, potentially compromising your privacy or security.

Hi! I’m here to help you understand CVE-2025-12910. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70