PT-2025-39219 · Google+3 · Google Chrome+3

Published 2025-01-01 · Updated 2025-11-12 · CVE-2025-10892

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 140.0.7339.207

Description An integer overflow in the V8 JavaScript engine within Google Chrome could lead to heap corruption. This issue potentially allows a remote attacker to exploit the system through a specially crafted HTML page.

Recommendations Update Google Chrome to version 140.0.7339.207 or later.

Fix

Integer Overflow

Weakness Enumeration

CWE-472

CWE-190

Related Identifiers

ALT-PU-2025-13054

BDU:2025-12390

CVE-2025-10892

DSA-6010-1

INFESA-2025_0007

OPENSUSE-SU-2025:15578-1

OPENSUSE-SU-2025:20020-1

Affected Products

Alt Linux

Debian

Google Chrome

Red Os

References · 55

• https://bdu.fstec.ru/vul/2025-12390 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2025-10892 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-10892 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15578-1 · Vendor Advisory
• https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_23.html · Vendor Advisory
• https://osv.dev/vulnerability/DSA-6010-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-10892 · Security Note
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20251225SE16 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-10892 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-1113SE18 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-1202SE17 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-1216SE141 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:20020-1 · Vendor Advisory
• https://t.me/msrcreports/2157 · Telegram Post