[UPDATE] [medium] Google Chrome: Vulnerability enables unspecified attack
An attacker can exploit a vulnerability in Google Chrome to perform an unspecified attack.
CSIRTS triage
- What
- An unspecified vulnerability in Google Chrome allows attackers to conduct an unspecified attack.
- Who is affected
- Users of Google Chrome across versions.
- Urgency
- Medium severity warrants timely patching; not yet exploited in the wild.
- Action
- Update Google Chrome to the latest available version.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch Chrome
Get an email when a new Chrome advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1126
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Moderate exploitation riskCVE-2025-50633.6% 30-day exploitation probability. Patch within normal cadence, watch for KEV listing. Riskier than 89% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2025-50640.34% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 26% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2025-50650.43% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 36% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2025-50660.43% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 36% of all EPSS-scored CVEs.
- Low exploitation riskCVE-2025-50670.38% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 31% of all EPSS-scored CVEs.
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2025-5063 | coverage & exploitation status | NVD · CVE.org |
| CVE-2025-5064 | coverage & exploitation status | NVD · CVE.org |
| CVE-2025-5065 | coverage & exploitation status | NVD · CVE.org |
| CVE-2025-5066 | coverage & exploitation status | NVD · CVE.org |
| CVE-2025-5067 | coverage & exploitation status | NVD · CVE.org |
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
Recent advisories for Google Chrome
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- unknownexploitedGoogle Chrome Multiple Vulnerabilitieshkcert · 2026-09-10
- unknownexploitedNCSC-2026-0354 [1.00] [M/H] Kwetsbaarheid verholpen in Google Chromencsc-nl · 2026-09-09
- high[NEU] [hoch] Google Chrome: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriffcert-bund · 2026-09-09
- high[UPDATE] [hoch] Google Chrome: Mehrere Schwachstellencert-bund · 2026-09-09
- highexploited[UPDATE] [hoch] Google Chrome / Microsoft Edge: Mehrere Schwachstellencert-bund · 2026-09-09
- mediumCVE-2026-87658: Information leak in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attack…nvd · 2026-09-09
More from CERT-Bund (BSI) Security Advisories
- high[UPDATE] [hoch] Fortinet FortiOS: Schwachstelle ermöglicht Codeausführung2026-09-10
- high[UPDATE] [hoch] ConnectWise ScreenConnect: Schwachstelle ermöglicht Codeausführung2026-09-10
- high[UPDATE] [hoch] Dell Secure Connect Gateway: Mehrere Schwachstellen2026-09-09
- medium[UPDATE] [mittel] Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service2026-09-09
- medium[UPDATE] [mittel] Red Hat Enterprise Linux (dracut): Schwachstelle ermöglicht Ausführen von beliebigem Program…2026-09-09