PT-2025-38317 · Google+3 · Google Chrome+3

Published 2025-01-01 · Updated 2025-11-12 · CVE-2025-10501

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 140.0.7339.185 Microsoft Edge versions prior to 140.0.7339.185

Description A use-after-free issue exists in the WebRTC component of Google Chrome and Microsoft Edge. This flaw could allow a remote attacker to potentially exploit heap corruption through a specially crafted HTML page. Exploitation may lead to arbitrary code execution.

Recommendations Google Chrome versions prior to 140.0.7339.185 should be updated to version 140.0.7339.185 or later. Microsoft Edge versions prior to 140.0.7339.185 should be updated to version 140.0.7339.185 or later.

Fix

RCE

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2025-13054

BDU:2025-11454

CVE-2025-10501

DSA-6004-1

OPENSUSE-SU-2025:15578-1

Affected Products

Alt Linux

Debian

Google Chrome

Red Os

References · 36

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-10501 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-10501 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-10501 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15578-1 · Vendor Advisory
• https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_17.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-10501 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-6004-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-11454 · Security Note
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20251225SE16 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-1113SE18 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-10501 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-1202SE17 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-1216SE127 · Vendor Advisory
• https://crbug.com/440737137 · Note