CVE-2025-0611

HighCVSS 8.2/10Last modified Jun 17, 2026

Description

Object corruption in V8 in Google Chrome prior to 132.0.6834.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Metrics

CVSS 3.1 8.2/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Weakness enumeration

CWE-122

Affected software

Vendor	Product	Versions
Google	Chrome	>= 132.0.6834.110, < 132.0.6834.110

References

https://chromereleases.googleblog.com/2025/01/stable-channel-update-for-desktop_22.htmlVendor Advisory
https://issues.chromium.org/issues/386143468Issue Tracking, Permissions Required

Timeline

Published: Jan 22, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-06127.5Out of bounds memory access in V8 in Google Chrome prior to 132.0.6834.110 allowed a remote attacker to potentially exploit heap corruption CVE-2025-06136.1The Photo Gallery by 10Web WordPress plugin before 1.8.34 does not sanitised and escaped comment added on images by unauthenticated users, CVE-2025-06145.3Input validation vulnerability in Qualifio's Wheel of Fortune. This vulnerability could allow an attacker to modify a single email to contai CVE-2025-06155.3Input validation vulnerability in Qualifio's Wheel of Fortune. This vulnerability allows an attacker to modify an email to contain the ‘+’ s CVE-2025-06168.2Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Teknolojik Center Telecommunication In CVE-2025-06175.9An attacker with access to an HX 10.0.0 and previous versions, may send specially-crafted data to the HX console. The malicious detection CVE-2025-06186.5A malicious third party could invoke a persistent denial of service vulnerability in FireEye EDR agent by sending a specially-crafted tamper CVE-2025-06194.9Unsafe password recovery from configuration in M-Files Server before 25.1 allows a highly privileged user to recover external connector pass CVE-2025-06204.9A flaw was found in Samba. The smbd service daemon does not pick up group membership changes when re-authenticating an expired SMB session. CVE-2025-06226.4A flaw was found in command/gpg. In some scenarios, hooks created by loaded modules are not removed when the related module is unloaded. Thi CVE-2025-06247.6A flaw was found in grub2. During the network boot process, when trying to search for the configuration file, grub copies data from a user c CVE-2025-06253.1A vulnerability, which was classified as problematic, was found in CampCodes School Management Software 1.0. This affects an unknown part of