The vulnerability of the privacy protection function of Fenced Frames in Google Chrome and Microsoft Edge allows attackers to gain unauthorized access to protected information.

The vulnerability of the Privacy-Fenced Frames function in Google Chrome and Microsoft Edge exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially...

PT-2025-6476 · Google +4 · Google Chrome +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 133.0.6943.98 Description: The issue is related to a use after free vulnerability in the V8 JavaScript engine, which can lead to heap corruption. This can be exploited by a remote attacker using a specially...

PT-2025-6475 · Microsoft +4 · Edge +4

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 133.0.6943.98 Microsoft Edge affected versions not specified Description: The issue is related to an inappropriate implementation in the Browser UI, allowing a remote attacker to spoof the contents of the Omnib...

PT-2025-6474 · Microsoft +4 · Edge +4

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 133.0.6943.98 Microsoft Edge affected versions not specified Description: The issue is related to a use after free vulnerability in the Navigation function of Google Chrome and Microsoft Edge browsers. This...

CVE-2025-0612

Out of bounds memory access in V8 in Google Chrome prior to 132.0.6834.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

AZL-56041 CVE-2025-0611 affecting package nodejs for versions less than 24.14.1-3

Object corruption in V8 in Google Chrome prior to 132.0.6834.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

AZL-56022 CVE-2025-0611 affecting package nodejs18 18.20.3-11

Object corruption in V8 in Google Chrome prior to 132.0.6834.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

PT-2025-3980 · Google +4 · Google Chrome +4

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 132.0.6834.110 Description: The issue is related to object corruption in the V8 engine of Google Chrome, which can lead to heap corruption. A remote attacker can potentially exploit this via a crafted HTML page...

PT-2025-3888 · Google +2 · V8 +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 133.0.6943.53 Description: A remote attacker could potentially exploit heap corruption via a crafted HTML page, leveraging a use after free issue in V8. The estimated number of potentially affected devices...

PT-2025-3887 · Microsoft +3 · Edge +4

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 133.0.6943.53 Microsoft Edge affected versions not specified Description: The issue is related to a use after free in Skia, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML...

Google Chrome Code Execution Vulnerability (CNVD-2025-06039)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a code execution vulnerability that is caused by out-of-bounds memory access in V8. An attacker can exploit the vulnerability to execute arbitrary code on the system...

Google Chrome Information Disclosure Vulnerability (CNVD-2025-03017)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from an information disclosure vulnerability that can be exploited by attackers to obtain potentially sensitive information from the system via a crafted HTML page...

Google Chrome Security Bypass Vulnerability (CNVD-2025-06037)

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome, which can be exploited by attackers to bypass security restrictions...

SUSE CVE-2025-0434

Out of bounds memory access in V8 in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2025-0439

Race in Frames in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2025-0448

Inappropriate implementation in Compositing in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

CVE-2025-0438

Stack buffer overflow in Tracing in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page. Chromium security severity: High...

CVE-2025-0434

Out of bounds memory access in V8 in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2025-0446

CVE-2025-0446 affects Google Chrome’s Extensions subsystem. The issue stems from an inappropriate implementation in Extensions prior to version 132.0.6834.83, permitting a remote attacker to induce a user to perform specific UI gestures and cause UI spoofing via a crafted Chrome Extension. The pr...

CVE-2025-0441

Inappropriate implementation in Fenced Frames in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to obtain potentially sensitive information from the system via a crafted HTML page. Chromium security severity: Medium...