CVE-2025-11460

Use after free in Storage in Google Chrome prior to 141.0.7390.65 allowed a remote attacker to execute arbitrary code via a crafted video file. (Chromium security severity: High)

Affected products

Alt Linux, Chromium, Debian, Google Chrome, Edge, Red Os

Google Chrome

< 141.0.7390.65

Fix

Available

CVSS 3.1

8.8 HIGH

EPSS

0.3% (25th percentile)

Weakness

CWE-416

NVD status

Analyzed

Published

2025-11-06