Description
Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CISA Known Exploited Vulnerability
Date added 2025-06-05 | Due date 2025-06-26
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Problem types
Out of bounds read and write
Product status
References
www.cisa.gov/...nerabilities-catalog?field_cve=CVE-2025-5419
msrc.microsoft.com/update-guide/vulnerability/CVE-2025-5419
chromereleases.googleblog.com/...nel-update-for-desktop.html