Home Google CVE-2025-1915
Back to Google

CVE-2025-1915

Google Chrome - DevTools

Google CVSS 8.1 Updated March 10, 2026

Executive Risk Summary

"A medium-severity vulnerability in Google Chrome's DevTools allows an attacker to bypass file access restrictions via a crafted Chrome Extension. This vulnerability can be exploited if a user is convinced to install a malicious extension, potentially leading to unauthorized file access."

Operational Audit Arsenal

Target Type Executable
Target Asset chrome.exe
Standard Path %ProgramFiles%GoogleChromeApplication
PowerShell
# 🛠️ Senior Engineer Universal Audit
# Target: chrome.exe (Executable)
$Targets = 'chrome.exe'
$SearchPaths = @("$env:windir\System32", "$env:ProgramFiles", "${env:ProgramFiles(x86)}")

Get-ChildItem -Path $SearchPaths -Include $Targets -Recurse -ErrorAction SilentlyContinue | 
Select-Object FullName, @{Name="Version";Expression={$_.VersionInfo.ProductVersion}}

Patch Impact Forecast

Reboot Required Unlikely

Web browsing services may be affected during the update process

Internal Work Notes

Apply Google Chrome update to version 134.0.6998.35 or later to mitigate the vulnerability

Technical Intelligence & Operational Utilities • Delivered Weekly

Intelligence Sources

Related Google Threats

Data compiled from NVD, MSRC, and CISA KEV Catalog. Intelligence synthesized via AI. Scripts provided for diagnostic purposes under MIT License.