PT-2025-23032 · Google+4 · Google Chrome+4

Pwn2Car · Publicado 2025-05-12 · Atualizado 2025-08-26 · CVE-2025-5280

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 137.0.7151.55

Description The issue is an out of bounds write in V8, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page. The severity of this issue is considered High.

Recommendations For versions prior to 137.0.7151.55, update to version 137.0.7151.55 or later to resolve the issue.

Correção

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

ALT-PU-2025-8435

BDU:2025-06282

CVE-2025-5280

DSA-5929-1

MGASA-2025-0187

OPENSUSE-SU-2025:15210-1

Produtos afetados

Alt Linux

Astra Linux

Debian

Google Chrome

Red Os

Referências · 52

• https://osv.dev/vulnerability/openSUSE-SU-2025:15210-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2025-5959 · Nota
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-chromium-03072025 · Nota
• https://suse.com/security/cve/CVE-2025-6554 · Nota
• https://bugs.mageia.org/show_bug.cgi?id=34340 · Nota
• https://advisories.mageia.org/MGASA-2025-0187.html · Nota de Segurança
• https://suse.com/security/cve/CVE-2025-6192 · Nota
• https://chromereleases.googleblog.com/2025/06/stable-channel-update-for-desktop_10.html · Nota
• https://suse.com/security/cve/CVE-2025-5958 · Nota
• https://suse.com/security/cve/CVE-2025-5068 · Nota
• https://osv.dev/vulnerability/DSA-5929-1 · Aviso do Fabricante
• https://twitter.com/cybercronai/status/1927999016182194513 · Publicação no Twitter
• https://suse.com/security/cve/CVE-2025-5063 · Nota
• https://xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.14 · Nota
• https://twitter.com/windowsforum/status/1928220435239366768 · Publicação no Twitter