CVE-2025-13631

CVE-2025-13631

High · published December 3, 2025

CVSS v3.1
8.8
EPSS
0%
Percentile
26.4
In the wild
Unconfirmed
What it is

⚡ A crafty file could elevate privileges on Google Chrome for Mac if you're running versions prior to 143.0.7499.41! Imagine a sneaky house guest who finds a hidden key under the welcome mat and suddenly has access to all your valuables. That's what this vulnerability allows: an attacker can exploit a cleverly crafted file to gain unauthorized access. An attacker could leverage this flaw to gain elevated privileges, potentially allowing them to control your system, install malicious software, or even steal sensitive data. The implications could be absolutely devastating if they gain access to your personal information or critical files.

Put simply

Imagine a sneaky house guest who finds a hidden key under the welcome mat and suddenly has access to all your valuables. That's what this vulnerability allows: an attacker can exploit a cleverly crafted file to gain unauthorized access. This vulnerability in Google Updater allows for privilege escalation when a malicious file is processed, bypassing intended security measures in Google Chrome on Mac systems.

What to do

An attacker could leverage this flaw to gain elevated privileges, potentially allowing them to control your system, install malicious software, or even steal sensitive data. The implications could be absolutely devastating if they gain access to your personal information or critical files. To stay safe, update your Google Chrome for Mac to version 143.0.7499.41 or later to close this security gap. Ensure your automatic updates are enabled or check manually for updates to keep your system secure. You've got this! Just follow the updates, and you’ll keep your system safe and sound. 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00342 · 26.4th percentile
Published
2025-12-03T00:15Z
Affected products (2)
ProductVersionsFixed in
google/chrome< 143.0.7499.40143.0.7499.40
google/chrome< 143.0.7499.40143.0.7499.40
References (2)
EPSS history
Timeline
  • 02 DEC 19:00Z
    Inappropriate implementation in Google Updater in Google Chrome on Mac prior to 143.0.7499.41 allowed a remote attacker to perform privilege escalation via a…
    cvelistv5