CVE details

CVE-2025-5419

Out of bounds read and write in V8 in Google Chrome prior to 137.

This vulnerability is known to have been exploited in attacks. Update affected browsers immediately.

Severity: High
CVSS: 8.8
Published: 2025-06-03
Fixed in: 137.0.7151.68

Description

Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Affected products

Google Chrome · → 137.0.7151.68
Chromium · → 137.0.7151.68
Microsoft Edge · → 137.0.3296.62

Overlaps: Google Chrome, Chromium, Microsoft Edge

Source

View on NVD

Check if your browser is affected