Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
https://www.theregister.com/2025/06/03/google_chrome_zero_day_emergency_fix/
https://www.securityweek.com/google-researchers-find-new-chrome-zero-day/
https://thehackernews.com/2025/06/new-chrome-zero-day-actively-exploited.html
https://chromereleases.googleblog.com/2025/06/stable-channel-update-for-desktop.html
Published: 2025-06-03
Updated: 2025-06-06
Base Score: 10
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
Severity: Critical
Base Score: 8.8
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity: High
EPSS: 0.00068
Tenable Research has classified this CVE under the following Vulnerability Watch classification, which includes active and historical (inactive) classifications. You can learn more about these classifications on our blog.
Vulnerability Being Monitored