CVE-2025-13720
Bad cast in Loader in Google Chrome prior to 143.0.7499.41 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
Scoring
- Severity
- HIGH
- CVSS base score
- 8.8
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- EPSS probability
- 0.27%
- CWE
- CWE-704
- Published
- 2025-12-02
- Last modified
- 2026-09-17
Affected products
- Google Chrome
Weakness type
Related vulnerabilities
- CVE-2025-41646 — RevPi Webstatus application is vulnerable to an authentication bypass
- CVE-2010-20115 — Vermillion FTP <= 1.31 Daemon PORT Command Memory Corruption
- CVE-2025-41648 — Pilz: Authentication Bypass in IndustrialPI Webstatus
- CVE-2023-21651 — Incorrect Type Conversion or Cast in Core
- CVE-2025-40541 — SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Remote Code Execution Vulnerability
- CVE-2025-40540 — SolarWinds Serv-U Type Confusion Remote Code Execution Vulnerability
- CVE-2025-40539 — SolarWinds Serv-U Type Confusion Remote Code Execution Vulnerability
- CVE-2021-39173 — Forced reinstall