PT-2025-35712 · Google +1 · Google Chrome +1

Pavel Kuzmin · Published 2025-07-28 · Updated 2025-10-29 · CVE-2025-9864

Positive Technologies · (AI Summary)

CVSS v2.0

10

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 140.0.7339.80 Microsoft Edge versions prior to 140.0.7339.80

Description A use-after-free issue exists in the V8 JavaScript engine used by Google Chrome and Microsoft Edge. This flaw could allow a remote attacker to exploit heap corruption through a specially crafted HTML page, potentially leading to arbitrary code execution or a denial-of-service condition. The vulnerability allows attackers to affect the system. An exploit for this issue has been developed, involving heap spraying techniques, though its reliability is not fully confirmed. A security researcher from Yandex Security Team discovered this issue within the Chromium project.

Recommendations Update Google Chrome to version 140.0.7339.80 or later. Update Microsoft Edge to version 140.0.7339.80 or later.

Fix

RCE

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2025-11125

CVE-2025-9864

DSA-5993-1

Affected Products

Debian

Google Chrome

References · 43

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-9864 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-11125 · Security Note
• https://bdu.fstec.ru/vul/2025-11127 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-9864 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9865 · Security Note
• https://bdu.fstec.ru/vul/2025-11128 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9866 · Security Note
• https://security-tracker.debian.org/tracker/DSA-5993-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-9864 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-9864 · Security Note
• https://bdu.fstec.ru/vul/2025-11126 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-9864 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2025-9864 · Vendor Advisory
• https://security-tracker.debian.org/tracker/source-package/chromium · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5993-1 · Vendor Advisory