p PatchFirst

CVE-2025-8577

CVE-2025-8577

CVSS 4.3 · Medium · EPSS 0.3% · Fix available

Are you affected?

  • chromeNo fix published
  • chromium Debian 12Update to 139.0.7258.66-1~deb12u1
  • chromium Debian 13Update to 139.0.7258.127-1~deb13u1
  • chromium Debian 14Update to 139.0.7258.66-1

Check the installed version:

dpkg-query -W -f='${source:Package} ${binary:Package} ${Version}\n' | awk '$1=="chromium"'

The free check shows your server's rating and highlights whether chrome and the rest of its software need attention. No sign-up; server names and IP addresses are never sent. CVE IDs, fixed versions and recommendations come with paid monitoring.

curl -fsSL https://patchfirst.dev/check.sh | sh
Check your server for free →

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

Inappropriate implementation in Picture In Picture in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

Published
Updated

Stack: system

Affected products and versions

  • chrome

    Versions
    • ≥ 139.0.7258.66, < 139.0.7258.66: Affected (custom)

    No fix published

  • chromium Debian 12

    Versions
    • 113.0.5672.126-1
    • 114.0.5735.106-1
    • 114.0.5735.106-1~deb11u1
    • 114.0.5735.106-1~deb12u1
    • 114.0.5735.133-1
    • 114.0.5735.133-1~deb11u1
    All versions (187)
    • 114.0.5735.133-1~deb12u1
    • 114.0.5735.198-1
    • 114.0.5735.198-1~deb11u1
    • 114.0.5735.198-1~deb12u1
    • 114.0.5735.90-1
    • 114.0.5735.90-2
    • 114.0.5735.90-2~deb11u1
    • 114.0.5735.90-2~deb12u1
    • 115.0.5790.102-1
    • 115.0.5790.102-2
    • 115.0.5790.170-1
    • 115.0.5790.170-1~deb11u1
    • 115.0.5790.170-1~deb12u1
    • 115.0.5790.98-1
    • 115.0.5790.98-1~deb11u1
    • 115.0.5790.98-1~deb12u1
    • 115.0.5790.98-2
    • 116.0.5845.110-1
    • 116.0.5845.110-1~deb11u1
    • 116.0.5845.110-1~deb12u1
    • 116.0.5845.110-2
    • 116.0.5845.140-1
    • 116.0.5845.140-1~deb11u1
    • 116.0.5845.140-1~deb12u1
    • 116.0.5845.180-1
    • 116.0.5845.180-1~deb11u1
    • 116.0.5845.180-1~deb12u1
    • 116.0.5845.96-1
    • 116.0.5845.96-1~deb11u1
    • 116.0.5845.96-1~deb12u1
    • 116.0.5845.96-2
    • 117.0.5938.132-1
    • 117.0.5938.132-1~deb11u1
    • 117.0.5938.132-1~deb12u1
    • 117.0.5938.132-2
    • 117.0.5938.149-1
    • 117.0.5938.149-1~deb11u1
    • 117.0.5938.149-1~deb12u1
    • 117.0.5938.62-1
    • 117.0.5938.62-1~deb11u1
    • 117.0.5938.62-1~deb12u1
    • 117.0.5938.92-1
    • 118.0.5993.117-1
    • 118.0.5993.117-1~deb11u1
    • 118.0.5993.117-1~deb12u1
    • 118.0.5993.70-1
    • 118.0.5993.70-1~deb11u1
    • 118.0.5993.70-1~deb12u1
    • 119.0.6045.105-1
    • 119.0.6045.105-1~deb11u1
    • 119.0.6045.105-1~deb12u1
    • 119.0.6045.123-1
    • 119.0.6045.123-1~deb11u1
    • 119.0.6045.123-1~deb12u1
    • 119.0.6045.159-1
    • 119.0.6045.159-1~deb11u1
    • 119.0.6045.159-1~deb12u1
    • 119.0.6045.199-1
    • 119.0.6045.199-1~deb11u1
    • 119.0.6045.199-1~deb12u1
    • 120.0.6099.109-1
    • 120.0.6099.109-1~deb11u1
    • 120.0.6099.109-1~deb12u1
    • 120.0.6099.129-1
    • 120.0.6099.129-1~deb11u1
    • 120.0.6099.129-1~deb12u1
    • 120.0.6099.199-1
    • 120.0.6099.199-1~deb11u1
    • 120.0.6099.199-1~deb12u1
    • 120.0.6099.216-1
    • 120.0.6099.216-1~deb11u1
    • 120.0.6099.216-1~deb12u1
    • 120.0.6099.224-1
    • 120.0.6099.224-1~deb11u1
    • 120.0.6099.224-1~deb12u1
    • 120.0.6099.224-2
    • 120.0.6099.71-1
    • 120.0.6099.71-1~deb11u1
    • 120.0.6099.71-1~deb12u1
    • 121.0.6167.139-1
    • 121.0.6167.139-1~deb12u1
    • 121.0.6167.160-1
    • 121.0.6167.160-1~deb12u1
    • 121.0.6167.85-1
    • 121.0.6167.85-1~deb12u1
    • 122.0.6261.111-1
    • 122.0.6261.111-1~deb12u1
    • 122.0.6261.128-1
    • 122.0.6261.128-1~deb12u1
    • 122.0.6261.57-1
    • 122.0.6261.57-1~deb12u1
    • 122.0.6261.94-1
    • 122.0.6261.94-1~deb12u1
    • 123.0.6312.105-1
    • 123.0.6312.105-1~deb12u1
    • 123.0.6312.105-1~deb13u1
    • 123.0.6312.105-2
    • 123.0.6312.122-1
    • 123.0.6312.122-1~deb12u1
    • 123.0.6312.58-1
    • 123.0.6312.86-1
    • 123.0.6312.86-1~deb12u1
    • 124.0.6367.118-1
    • 124.0.6367.118-1~deb12u1
    • 124.0.6367.155-1
    • 124.0.6367.155-1~deb12u1
    • 124.0.6367.201-1
    • 124.0.6367.201-1~deb12u1
    • 124.0.6367.207-1
    • 124.0.6367.207-1~deb12u1
    • 124.0.6367.60-1
    • 124.0.6367.60-1~deb12u1
    • 124.0.6367.60-2
    • 124.0.6367.78-1
    • 124.0.6367.78-1~deb12u1
    • 125.0.6422.112-1
    • 125.0.6422.112-1~deb12u1
    • 125.0.6422.141-1
    • 125.0.6422.141-1~deb12u1
    • 125.0.6422.60-1
    • 125.0.6422.60-1~deb12u1
    • 125.0.6422.76-1
    • 125.0.6422.76-1~deb12u1
    • 126.0.6478.114-1
    • 126.0.6478.114-1~deb12u1
    • 126.0.6478.126-1
    • 126.0.6478.126-1~deb12u1
    • 126.0.6478.126-1~deb13u1
    • 126.0.6478.182-1
    • 126.0.6478.182-1~deb12u1
    • 126.0.6478.56-1
    • 126.0.6478.56-1~deb12u1
    • 127.0.6533.119-1
    • 127.0.6533.119-1~deb13u1
    • 127.0.6533.88-1
    • 127.0.6533.88-1~deb12u1
    • 127.0.6533.99-1
    • 127.0.6533.99-1~deb12u1
    • 128.0.6613.113-1
    • 128.0.6613.113-1~deb12u1
    • 128.0.6613.113-1~deb13u1
    • 128.0.6613.119-1
    • 128.0.6613.119-1~deb12u1
    • 128.0.6613.137-1
    • 128.0.6613.137-1~deb12u1
    • 128.0.6613.84-1
    • 128.0.6613.84-1~deb12u1
    • 129.0.6668.100-1
    • 129.0.6668.100-1~deb12u1
    • 129.0.6668.100-2
    • 129.0.6668.58-1
    • 129.0.6668.58-1~deb12u1
    • 129.0.6668.70-1
    • 129.0.6668.70-1~deb12u1
    • 129.0.6668.89-1
    • 129.0.6668.89-1~deb12u1
    • 130.0.6723.116-1
    • 130.0.6723.116-1~deb12u1
    • 130.0.6723.58-1
    • 130.0.6723.58-1~deb12u1
    • 130.0.6723.69-1
    • 130.0.6723.69-1~deb12u1
    • 130.0.6723.91-1
    • 130.0.6723.91-1~deb12u1
    • 130.0.6723.91-2
    • 131.0.6778.108-1
    • 131.0.6778.108-1~deb12u1
    • 131.0.6778.139-1
    • 131.0.6778.139-1~deb12u1
    • 131.0.6778.204-1
    • 131.0.6778.204-1~deb12u1
    • 131.0.6778.264-1
    • 131.0.6778.264-1~deb12u1
    • 131.0.6778.85-1
    • 131.0.6778.85-1~deb12u1
    • 132.0.6834.110-1
    • 132.0.6834.110-1~deb12u1
    • 132.0.6834.159-1
    • 132.0.6834.159-1~deb12u1
    • 132.0.6834.83-1
    • 133.0.6943.126-1

    Update to 139.0.7258.66-1~deb12u1

  • chromium Debian 13

    Versions
    • 138.0.7204.183-1
    • 139.0.7258.127-1~deb12u1
    • 139.0.7258.66-1
    • 139.0.7258.66-1~deb12u1
    Affected ranges
    • ECOSYSTEM: < 139.0.7258.127-1~deb13u1

    Update to 139.0.7258.127-1~deb13u1

  • chromium Debian 14

    Versions
    • 138.0.7204.183-1
    • 139.0.7258.66-1~deb12u1
    Affected ranges
    • ECOSYSTEM: < 139.0.7258.66-1

    Update to 139.0.7258.66-1

Original sources

Check your server →