CVE-2025-13992: Google Chrome

Medium severity, CVSS 4.7. EPSS: 0.2% chance of exploitation in the next 30 days.

Side-channel information leakage in Navigation and Loading in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)

Affected products

• Google Chrome: before 139.0.7258.66 (fixed in 139.0.7258.66)

Published 2025-12-03. Last modified 2026-09-25.