CVE-2025-5419

Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Affected products

Alt Linux, Astra Linux, Debian, Google Chrome, Red Os, V8

Google Chrome

< 137.0.7151.68

Fix

Available

CVSS 3.1

8.8 HIGH

EPSS

7.5% (94th percentile)

Weakness

CWE-125, CWE-787

NVD status

Analyzed

Published

2025-06-02