CVE-2025-0434

Out of bounds memory access in V8 in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Affected

Google · Chrome

CVSS v3.1 CNA

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

6.00% chance of exploitation in the next 30 days, 93rd percentile

Published

2025-01-15

Updated

2025-03-14

Proof-of-concept exploits (1)

• https://issues.chromium.org/issues/374627491

Security advisories

• https://chromereleases.googleblog.com/2025/01/stable-channel-update-for-desktop_14.html

References

• CVE Record
• NVD entry