PT-2025-40435 · Microsoft+4 · Edge+5

Published 2025-01-01 · Updated 2025-11-13 · CVE-2025-11209

Positive Technologies · (AI Summary)

CVSS v3.1

8.2

High

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Chromium (affected versions not specified)

Description An inappropriate implementation in the Omnibox allows attackers to affect the system. Microsoft Edge (Chromium-based) is also impacted as it ingests Chromium.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Authentication Bypass by Spoofing

Weakness Enumeration

CWE-787

CWE-290

Related Identifiers

ALT-PU-2025-13054

BDU:2025-13631

CVE-2025-11209

DSA-6016-1

OPENSUSE-SU-2025:15601-1

OPENSUSE-SU-2025:20020-1

Affected Products

Alt Linux

Chromium

Debian

Google Chrome

Edge

Red Os

References · 41

• 🔥 https://github.com/AdityaBhatt3010/CVE-2025-10585-The-Chrome-V8-Zero-Day · Exploit
• https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_30.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15601-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-13631 · Security Note
• https://osv.dev/vulnerability/DSA-6016-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-11209 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-11209 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-11209 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-11209 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2025:20020-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-11209 · Vendor Advisory
• https://suse.com/security/cve/CVE-2025-11216 · Note
• https://suse.com/security/cve/CVE-2025-11205 · Note
• https://bugzilla.suse.com/1250472 · Note
• https://suse.com/security/cve/CVE-2025-11458 · Note