Skip to content
OpenAdvisories
Medium · 4.3 CVE-2025-13102 EUVD-2025-180544GHSA-h3xj-4mp2-qr5w

Inappropriate implementation in WebApp Installs in Google Chrome on Android prior to 134.0.6998.35 allowed a remote attacker to perform UI …

Published Nov 14, 2025 · Updated Nov 14, 2025 · Assigned by Chrome

Vendor: Google Product: Chrome Package: chromium Category: Browsers Ecosystem: Wolfi

Description

Inappropriate implementation in WebApp Installs in Google Chrome on Android prior to 134.0.6998.35 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)

Affected products

VendorProductAffectedFixed
Google Chrome 134.0.6998.35 – < 134.0.6998.35 134.0.6998.35

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling chromium 134.0.6998.35-r0 —

References