CVE-2025-1915HIGH 8.1EPSS p33.1%

CVE-2025-1915CVE-2025-1915

Description

Improper Limitation of a Pathname to a Restricted Directory in DevTools in Google Chrome on Windows prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to bypass file access restrictions via a crafted Chrome Extension. (Chromium security severity: Medium)

Scoring

CVSS 3.18.1 (HIGH)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
EPSS0.41% probability of exploitation · percentile 33.1% · 2026-06-19T12:03:05Z
Published2025-03-05
Last modified2025-04-01

Underlying weaknesses· 1

CWE-22

References

  1. https://chromereleases.googleblog.com/2025/03/stable-channel-update-for-desktop.html
  2. https://issues.chromium.org/issues/391114799

1

TypeTargetConfidenceTier
WeaknessImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')cwe-220%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2026-11189
CVE
CVE-2022-2160
CVE
CVE-2026-11190
CVE
CVE-2026-10997
CVE
CVE-2026-11026
CVE
CVE-2026-11092
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.