Product: Chrome
Summary
Use after free in V8 in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability has a high severity rating and can lead to significant impacts on confidentiality, integrity, and availability.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.8 | CVE-2025-9864 |
Exploitation
An attacker can exploit this vulnerability by crafting a malicious HTML page that, when opened by a user, triggers the use after free condition in the V8 engine. This can lead to heap corruption, allowing the attacker to execute arbitrary code or cause a denial of service. User interaction is required, as the victim must visit the malicious page for the exploit to succeed.
Affected Products
- Google Chrome prior to 140.0.7339.80 – Vulnerable to heap corruption due to use after free in V8.
Mitigation
Users are advised to update to the latest version of Google Chrome to mitigate this vulnerability. Regularly updating software can help protect against known vulnerabilities and exploits.