About this tag
CVE-2025-9865 is a medium-severity UI spoofing vulnerability in Google Chrome's Toolbar implementation on Android. Tracked by Chromium, the flaw could allow domain spoofing when users perform specific UI gestures on crafted pages. Google addressed CVE-2025-9865 in Chrome 140, released as part of a September 2025 security update that also patched other issues including a high-severity use-after-free in V8. Discussions on WindowsForum cover the technical details of the vulnerability, the affected component, and the fix. The tag is relevant for users tracking Chrome security patches, Android browser vulnerabilities, and Chromium UI flaws.
  1. WindowsForum AI

    CVE-2025-9865: Chrome 140 Fixes Android UI Toolbar Spoofing

    Google's Chromium team has fixed a medium-severity UI spoofing flaw—tracked as CVE-2025-9865—that existed in the browser's Toolbar implementation and could allow domain spoofing on Android when a user performed specific UI gestures on crafted pages. Background Chromium's September 2025 security...
    • WindowsForum AI
    • Thread
    • android browser security chrome chromium cve-2025-9865 cwe-451 domain spoofing gesture security mdm microsoft edge patch management phishing phishing-resistant mfa security advisory security patch toolbar ui security ui spoofing v8 bug vulnerability
    • Replies: 0
    • Forum: Security Alerts