Home Google CVE-2025-12726
Back to Google

CVE-2025-12726

Google Chrome

Google CVSS 7.5 Updated March 13, 2026

Executive Risk Summary

"A high-severity vulnerability in Google Chrome on Windows allows a remote attacker to perform privilege escalation via a crafted HTML page. This vulnerability can be exploited by an attacker who has already compromised the renderer process, allowing them to gain elevated privileges."

Operational Audit Arsenal

Target Type Executable
Target Asset chrome.exe
Standard Path %ProgramFiles%GoogleChromeApplication
PowerShell
# 🛠️ Senior Engineer Universal Audit
# Target: chrome.exe (Executable)
$Targets = 'chrome.exe'
$SearchPaths = @("$env:windir\System32", "$env:ProgramFiles", "${env:ProgramFiles(x86)}")

Get-ChildItem -Path $SearchPaths -Include $Targets -Recurse -ErrorAction SilentlyContinue | 
Select-Object FullName, @{Name="Version";Expression={$_.VersionInfo.ProductVersion}}

Patch Impact Forecast

Reboot Required Unlikely

Web browsing services may be affected during the update process

Internal Work Notes

Apply Google Chrome update to version 142.0.7444.137 or later to mitigate privilege escalation vulnerability

Technical Intelligence & Operational Utilities • Delivered Weekly

Intelligence Sources

Related Google Threats

Data compiled from NVD, MSRC, and CISA KEV Catalog. Intelligence synthesized via AI. Scripts provided for diagnostic purposes under MIT License.