CVE-2025-5064

Publication date

2025-05-27 20:43:03

Family

Chrome

State

PUBLISHED

Description

Inappropriate implementation in Background Fetch API in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)