PT-2025-30492 · Google+4 · Google Chrome+4

Published 2025-07-09 · Updated 2026-04-02 · CVE-2025-8010

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 138.0.7204.168 Microsoft Edge versions prior to 138.0.7204.168 Chromium versions prior to 138.0.7204.168 Chromium versions 138.0.7204.168-1~deb12u1

Description A type confusion issue exists in the V8 JavaScript engine component of Google Chrome, Microsoft Edge, and Chromium. This issue could allow a remote attacker to exploit heap corruption by crafting a malicious HTML page. Exploitation may lead to arbitrary code execution or denial of service. The vulnerability is related to errors in data type conversion within the V8 engine.

Recommendations Update Google Chrome to version 138.0.7204.168 or later. Update Microsoft Edge to version 138.0.7204.168 or later. Update Chromium to version 138.0.7204.168 or later. For Debian systems, upgrade chromium packages to version 138.0.7204.168-1~deb12u1 or later. For openSUSE Tumbleweed systems, update the chromedriver package to version 138.0.7204.168-1.1 or later.

Fix

Type Confusion

Weakness Enumeration

CWE-843

Related Identifiers

ALT-PU-2025-9770

AZL-76338

BDU:2025-09419

CVE-2025-8010

DSA-5965-1

OPENSUSE-SU-2025:15375-1

Affected Products

Alt Linux

Astra Linux

Debian

Google Chrome

Red Os

References · 45

• https://security-tracker.debian.org/tracker/CVE-2025-8010 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5965-1 · Vendor Advisory
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2025-8010 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-8010 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/723281 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-8010 · Security Note
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-1020SE47 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-76338 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-09419 · Security Note
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-0923SE17 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15375-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-8010 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-1113SE18 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20251225SE16 · Vendor Advisory