PT-2025-10635 · Google+4 · Google Chrome+4

Publicado 2025-02-21 · Atualizado 2025-06-04 · CVE-2025-1920

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 134.0.6998.88

Description A type confusion issue in V8 in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. The severity of this issue is rated as High.

Recommendations For versions prior to 134.0.6998.88, update to version 134.0.6998.88 or later to resolve the issue.

Correção

Type Confusion

Enumeração de Fraquezas

CWE-843

Identificadores relacionados

ALT-PU-2025-4366

AZL-58372

BDU:2025-02573

CVE-2025-1920

DSA-5877-1

MGASA-2025-0104

OPENSUSE-SU-2025:0089-1

OPENSUSE-SU-2025:14888-1

OPENSUSE-SU-2025:14917-1

Produtos afetados

Alt Linux

Astra Linux

Debian

Google Chrome

Red Os

Referências · 55

• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-1020SE47 · Aviso do Fabricante
• https://security.paloaltonetworks.com/PAN-SA-2025-0008 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1920 · Nota
• https://suse.com/security/cve/CVE-2025-2136 · Nota
• https://safe-surf.ru/specialists/bulletins-nkcki/720579 · Nota de Segurança
• https://suse.com/security/cve/CVE-2025-2137 · Nota
• https://suse.com/security/cve/CVE-2025-1920 · Nota
• https://xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.13 · Nota
• https://twitter.com/Andrei09230811/status/1899276265120747827 · Publicação no Twitter
• https://advisories.mageia.org/MGASA-2025-0104.html · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2025-1920 · Aviso do Fabricante
• https://osv.dev/vulnerability/openSUSE-SU-2025:0089-1 · Aviso do Fabricante
• https://t.me/cvenotify/114158 · Publicação no Telegram
• https://bugzilla.suse.com/1239216 · Nota
• https://twitter.com/windowsforum/status/1902260101467017380 · Publicação no Twitter