PT-2025-43032 · Google+3 · Google Chrome+3
Published
2025-10-21
·
Updated
2025-12-11
·
CVE-2025-12036
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 141.0.7390.122
Description
An out-of-bounds memory access issue exists in the V8 JavaScript engine within Google Chrome. This flaw allows a remote attacker to perform out-of-bounds memory access by way of a specially crafted HTML page. The vulnerability was detected by Google’s AI-driven “Big Sleep” project and is actively being exploited. The issue involves improper implementation in V8 related to security checks for standard elements. Exploitation may lead to a denial of service or, potentially, remote code execution. The
Expect() and ExpectNext() functions within the JSON parser can trigger garbage collection due to the allocation of an Exception object, potentially leading to the issue.Recommendations
Update Google Chrome to version 141.0.7390.122 or later.
Fix
RCE
Out of bounds Read
Improperly Implemented Security Check for Standard
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Debian
Google Chrome
Red Os