p PatchFirst

CVE-2025-13097

CVE-2025-13097

CVSS 5.4 · Medium · EPSS 0.2% · Fix available

Are you affected?

  • chromeNo fix published
  • chromium Debian 12Update to 136.0.7103.59-2~deb12u2
  • chromium Debian 13Update to 136.0.7103.59-2
  • chromium Debian 14Update to 136.0.7103.59-2

Check the installed version:

dpkg-query -W -f='${source:Package} ${binary:Package} ${Version}\n' | awk '$1=="chromium"'

The free check shows your server's rating and highlights whether chrome and the rest of its software need attention. No sign-up; server names and IP addresses are never sent. CVE IDs, fixed versions and recommendations come with paid monitoring.

curl -fsSL https://patchfirst.dev/check.sh | sh
Check your server for free →

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

Inappropriate implementation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)

Published
Updated

Stack: system

Affected products and versions

  • chrome

    Versions
    • ≥ 136.0.7103.59, < 136.0.7103.59: Affected (custom)

    No fix published

  • chromium Debian 12

    Versions
    • 113.0.5672.126-1
    • 114.0.5735.106-1
    • 114.0.5735.106-1~deb11u1
    • 114.0.5735.106-1~deb12u1
    • 114.0.5735.133-1
    • 114.0.5735.133-1~deb11u1
    All versions (187)
    • 114.0.5735.133-1~deb12u1
    • 114.0.5735.198-1
    • 114.0.5735.198-1~deb11u1
    • 114.0.5735.198-1~deb12u1
    • 114.0.5735.90-1
    • 114.0.5735.90-2
    • 114.0.5735.90-2~deb11u1
    • 114.0.5735.90-2~deb12u1
    • 115.0.5790.102-1
    • 115.0.5790.102-2
    • 115.0.5790.170-1
    • 115.0.5790.170-1~deb11u1
    • 115.0.5790.170-1~deb12u1
    • 115.0.5790.98-1
    • 115.0.5790.98-1~deb11u1
    • 115.0.5790.98-1~deb12u1
    • 115.0.5790.98-2
    • 116.0.5845.110-1
    • 116.0.5845.110-1~deb11u1
    • 116.0.5845.110-1~deb12u1
    • 116.0.5845.110-2
    • 116.0.5845.140-1
    • 116.0.5845.140-1~deb11u1
    • 116.0.5845.140-1~deb12u1
    • 116.0.5845.180-1
    • 116.0.5845.180-1~deb11u1
    • 116.0.5845.180-1~deb12u1
    • 116.0.5845.96-1
    • 116.0.5845.96-1~deb11u1
    • 116.0.5845.96-1~deb12u1
    • 116.0.5845.96-2
    • 117.0.5938.132-1
    • 117.0.5938.132-1~deb11u1
    • 117.0.5938.132-1~deb12u1
    • 117.0.5938.132-2
    • 117.0.5938.149-1
    • 117.0.5938.149-1~deb11u1
    • 117.0.5938.149-1~deb12u1
    • 117.0.5938.62-1
    • 117.0.5938.62-1~deb11u1
    • 117.0.5938.62-1~deb12u1
    • 117.0.5938.92-1
    • 118.0.5993.117-1
    • 118.0.5993.117-1~deb11u1
    • 118.0.5993.117-1~deb12u1
    • 118.0.5993.70-1
    • 118.0.5993.70-1~deb11u1
    • 118.0.5993.70-1~deb12u1
    • 119.0.6045.105-1
    • 119.0.6045.105-1~deb11u1
    • 119.0.6045.105-1~deb12u1
    • 119.0.6045.123-1
    • 119.0.6045.123-1~deb11u1
    • 119.0.6045.123-1~deb12u1
    • 119.0.6045.159-1
    • 119.0.6045.159-1~deb11u1
    • 119.0.6045.159-1~deb12u1
    • 119.0.6045.199-1
    • 119.0.6045.199-1~deb11u1
    • 119.0.6045.199-1~deb12u1
    • 120.0.6099.109-1
    • 120.0.6099.109-1~deb11u1
    • 120.0.6099.109-1~deb12u1
    • 120.0.6099.129-1
    • 120.0.6099.129-1~deb11u1
    • 120.0.6099.129-1~deb12u1
    • 120.0.6099.199-1
    • 120.0.6099.199-1~deb11u1
    • 120.0.6099.199-1~deb12u1
    • 120.0.6099.216-1
    • 120.0.6099.216-1~deb11u1
    • 120.0.6099.216-1~deb12u1
    • 120.0.6099.224-1
    • 120.0.6099.224-1~deb11u1
    • 120.0.6099.224-1~deb12u1
    • 120.0.6099.224-2
    • 120.0.6099.71-1
    • 120.0.6099.71-1~deb11u1
    • 120.0.6099.71-1~deb12u1
    • 121.0.6167.139-1
    • 121.0.6167.139-1~deb12u1
    • 121.0.6167.160-1
    • 121.0.6167.160-1~deb12u1
    • 121.0.6167.85-1
    • 121.0.6167.85-1~deb12u1
    • 122.0.6261.111-1
    • 122.0.6261.111-1~deb12u1
    • 122.0.6261.128-1
    • 122.0.6261.128-1~deb12u1
    • 122.0.6261.57-1
    • 122.0.6261.57-1~deb12u1
    • 122.0.6261.94-1
    • 122.0.6261.94-1~deb12u1
    • 123.0.6312.105-1
    • 123.0.6312.105-1~deb12u1
    • 123.0.6312.105-1~deb13u1
    • 123.0.6312.105-2
    • 123.0.6312.122-1
    • 123.0.6312.122-1~deb12u1
    • 123.0.6312.58-1
    • 123.0.6312.86-1
    • 123.0.6312.86-1~deb12u1
    • 124.0.6367.118-1
    • 124.0.6367.118-1~deb12u1
    • 124.0.6367.155-1
    • 124.0.6367.155-1~deb12u1
    • 124.0.6367.201-1
    • 124.0.6367.201-1~deb12u1
    • 124.0.6367.207-1
    • 124.0.6367.207-1~deb12u1
    • 124.0.6367.60-1
    • 124.0.6367.60-1~deb12u1
    • 124.0.6367.60-2
    • 124.0.6367.78-1
    • 124.0.6367.78-1~deb12u1
    • 125.0.6422.112-1
    • 125.0.6422.112-1~deb12u1
    • 125.0.6422.141-1
    • 125.0.6422.141-1~deb12u1
    • 125.0.6422.60-1
    • 125.0.6422.60-1~deb12u1
    • 125.0.6422.76-1
    • 125.0.6422.76-1~deb12u1
    • 126.0.6478.114-1
    • 126.0.6478.114-1~deb12u1
    • 126.0.6478.126-1
    • 126.0.6478.126-1~deb12u1
    • 126.0.6478.126-1~deb13u1
    • 126.0.6478.182-1
    • 126.0.6478.182-1~deb12u1
    • 126.0.6478.56-1
    • 126.0.6478.56-1~deb12u1
    • 127.0.6533.119-1
    • 127.0.6533.119-1~deb13u1
    • 127.0.6533.88-1
    • 127.0.6533.88-1~deb12u1
    • 127.0.6533.99-1
    • 127.0.6533.99-1~deb12u1
    • 128.0.6613.113-1
    • 128.0.6613.113-1~deb12u1
    • 128.0.6613.113-1~deb13u1
    • 128.0.6613.119-1
    • 128.0.6613.119-1~deb12u1
    • 128.0.6613.137-1
    • 128.0.6613.137-1~deb12u1
    • 128.0.6613.84-1
    • 128.0.6613.84-1~deb12u1
    • 129.0.6668.100-1
    • 129.0.6668.100-1~deb12u1
    • 129.0.6668.100-2
    • 129.0.6668.58-1
    • 129.0.6668.58-1~deb12u1
    • 129.0.6668.70-1
    • 129.0.6668.70-1~deb12u1
    • 129.0.6668.89-1
    • 129.0.6668.89-1~deb12u1
    • 130.0.6723.116-1
    • 130.0.6723.116-1~deb12u1
    • 130.0.6723.58-1
    • 130.0.6723.58-1~deb12u1
    • 130.0.6723.69-1
    • 130.0.6723.69-1~deb12u1
    • 130.0.6723.91-1
    • 130.0.6723.91-1~deb12u1
    • 130.0.6723.91-2
    • 131.0.6778.108-1
    • 131.0.6778.108-1~deb12u1
    • 131.0.6778.139-1
    • 131.0.6778.139-1~deb12u1
    • 131.0.6778.204-1
    • 131.0.6778.204-1~deb12u1
    • 131.0.6778.264-1
    • 131.0.6778.264-1~deb12u1
    • 131.0.6778.85-1
    • 131.0.6778.85-1~deb12u1
    • 132.0.6834.110-1
    • 132.0.6834.110-1~deb12u1
    • 132.0.6834.159-1
    • 132.0.6834.159-1~deb12u1
    • 132.0.6834.83-1
    • 133.0.6943.126-1

    Update to 136.0.7103.59-2~deb12u2

  • chromium Debian 13

    Affected ranges
    • ECOSYSTEM: < 136.0.7103.59-2

    Update to 136.0.7103.59-2

  • chromium Debian 14

    Affected ranges
    • ECOSYSTEM: < 136.0.7103.59-2

    Update to 136.0.7103.59-2

Original sources

Check your server →