CVE-2025-12910: medium-severity vulnerability in Google Chrome
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
A vulnerability in Google Chrome's Passkeys feature allows local attackers to access sensitive information from debug logs. This could expose authentication details or other confidential data if someone gains access to your computer.
Inappropriate implementation in the Passkeys functionality (CWE-1295: Improper Neutralization of Special Elements) in Chrome versions prior to 140.0.7339.80 permits local attackers to extract potentially sensitive information through debug logs. The attack requires local access to the affected system; impact includes disclosure of information that should not be exposed in logging mechanisms.
In the same product, most dangerous first.