Description Preview
The CVE-2025-1922 vulnerability is due to an inappropriate implementation in the Selection feature of Google Chrome on Android. This vulnerability is exploitable if a remote attacker can convince a user to perform specific UI gestures on a maliciously crafted HTML page. The attacker can then perform UI spoofing, potentially misleading the user or causing them to perform actions they did not intend to. The severity of this vulnerability is considered low.
Overview
The vulnerability is identified as CVE-2025-1922. It was first published on 2025-03-05 and last updated on the same day. The vulnerability affects Google Chrome on Android prior to version 134.0.6998.35. The problem type is identified as an inappropriate implementation (CWE-451). The CVSS base score is 4.3, indicating a medium severity level. User interaction is required for the vulnerability to be exploited.
Remediation
Users are advised to update their Google Chrome on Android to the latest version to mitigate this vulnerability. As the vulnerability affects versions prior to 134.0.6998.35, updating to a version beyond this should resolve the issue.
References
More information about this vulnerability can be found at the following URLs:
Industry ExposureMost to leastThis section illustrates the prevalence of a specific Common Vulnerabilities and Exposures (CVE) across various industries based on customer reports. The ranking displays industries from the most to least affected by this particular vulnerability, offering valuable insight into where this CVE has been most frequently observed. This information can help organizations within these sectors prioritize their security efforts, understand their relative risk exposure compared to their peers, and focus remediation strategies where they are most needed. By understanding the industry-specific impact, organizations can make more informed decisions regarding patching, resource allocation, and overall risk management related to this CVE.
This section illustrates the prevalence of a specific Common Vulnerabilities and Exposures (CVE) across various industries based on customer reports. The ranking displays industries from the most to least affected by this particular vulnerability, offering valuable insight into where this CVE has been most frequently observed. This information can help organizations within these sectors prioritize their security efforts, understand their relative risk exposure compared to their peers, and focus remediation strategies where they are most needed. By understanding the industry-specific impact, organizations can make more informed decisions regarding patching, resource allocation, and overall risk management related to this CVE.
- ManufacturingManufacturing
- Health Care & Social AssistanceHealth Care & Social Assistance
- Public AdministrationPublic Administration
- Finance and InsuranceFinance and Insurance
- Transportation & WarehousingTransportation & Warehousing
- Educational ServicesEducational Services
- Professional, Scientific, & Technical ServicesProfessional, Scientific, & Technical Services
- Other Services (except Public Administration)Other Services (except Public Administration)
- UtilitiesUtilities
- Retail TradeRetail Trade
- Arts, Entertainment & RecreationArts, Entertainment & Recreation
- InformationInformation
- Management of Companies & EnterprisesManagement of Companies & Enterprises
- Accommodation & Food ServicesAccommodation & Food Services
- Agriculture, Forestry Fishing & HuntingAgriculture, Forestry Fishing & Hunting
- MiningMining
- Real Estate Rental & LeasingReal Estate Rental & Leasing
- ConstructionConstruction
- Wholesale TradeWholesale Trade
- Administrative, Support, Waste Management & Remediation ServicesAdministrative, Support, Waste Management & Remediation Services
