PT-2025-29591

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 138.0.7204.157 Description An integer overflow in V8, the JavaScript engine used in Google Chrome, could allow a remote attacker to exploit heap corruption via a crafted HTML page. The Chromium security severity...

Astra Linux – Vulnerability in Chromium

In V8, reading outside the bounds of permission in Google Chrome before version 134.0.6998.35 allowed a remote attacker to perform out-of-bound memory access through a crafted HTML page. Chromium security severity: High...

Vulnerabilities fixed in Google Chrome and Microsoft Edge

Google has fixed vulnerabilities in Google Chrome versions before 137.0.7151.68. The vulnerabilities are in Google Chrome's V8 engine and Blink. The first vulnerability involves out of bounds read and write problems that can lead to heap corruption. This can be exploited by a malicious party by...

Google fixes another actively exploited vulnerability in Chrome, so update now!

Google has released an update for the Chrome browser to patch an actively exploited flaw. The update brings the Stable channel to versions 137.0.7151.68/.69 for Windows and Mac and 137.0.7151.68 for Linux. The easiest way to update Chrome is to allow it to update automatically, but you can end up...

Google Chrome Out-of-Bounds Read/Write Vulnerability

Google Chrome is a web browser developed by Google Inc. Google Chrome suffers from an out-of-bounds read/write vulnerability that stems from an out-of-bounds read/write issue in the V8 engine, which can be exploited by an attacker to trigger the vulnerability via a malicious web page, bypassing t...

SUSE CVE-2025-5280

Out of bounds write in V8 in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2025-5280

Out of bounds write in V8 in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2025-2135

Type Confusion in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

The vulnerability of the JavaScript script handler interface of Google Chrome’s V8 engine allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the JavaScript script handler interface of Google Chrome’s V8 engine is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

SUSE CVE-2025-2135

Type Confusion in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to type conversion errors. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to type conversion errors. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures...

CVE-2025-2135

Type Confusion in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2025-1920

Type Confusion in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2025-1920

Type Confusion in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2025-1920

CVE-2025-1920 affects Google Chrome/Chromium where a Type Confusion in V8 prior to 134.0.6998.88 can lead to heap corruption via a crafted HTML page. The vulnerability originates in V8’s handling of certain objects, with impact described as high for confidentiality, integrity, and availability. A...

CVE-2025-1914

Out of bounds read in V8 in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. Chromium security severity: High...

Heap Overflow Vulnerability in Google Chrome V8

Google Chrome is a WEB browser developed by Google Inc. Google Chrome V8 suffers from a heap overflow vulnerability that can be exploited by a remote attacker to submit a special Web request that induces the user to parse it, which can be used to execute arbitrary code in the application context...

AZL-57089 CVE-2025-0999 affecting package nodejs18 18.20.3-11

Heap buffer overflow in V8 in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

PT-2025-7481

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 133.0.6943.126 Description A heap buffer overflow in V8 in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. The issue has a high security severity rating fr...