CISA Known Exploited Vulnerability (KEV)
Google Chromium V8 Out-of-Bounds Read and Write Vulnerability
June 5, 2025
June 26, 2025
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Description
Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
References
Weakness Enumeration
| CWE-ID | CWE Name |
|---|---|
|
CWE-125 |
Out-of-bounds Read |