CVE-2025-1921

Medium

Inappropriate implementation in Media Stream in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to obtain information about…

Chrome·CWE-1230·Published 2025-03-05

CVSS

6.5

EPSS

0.00

KEV

Exploits

cve.orgen

213 chars

Inappropriate implementation in Media Stream in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to obtain information about a peripheral via a crafted HTML page. (Chromium security severity: Medium)

NVDen

213 chars

NVDes

251 chars

Una implementación inadecuada en Media Stream en Google Chrome anterior a la versión 134.0.6998.35 permitía a un atacante remoto obtener información sobre un periférico a través de una página HTML manipulada. (Gravedad de seguridad de Chromium: media)

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	6.5	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
3.1	Primary	cve.org	6.5	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N