Product:
Chrome
Summary
Use after free in Serviceworker in Google Chrome on Desktop prior to 140.0.7339.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability has been classified with a critical severity level.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.8 | CVE-2025-10200 |
Exploitation
An attacker can exploit this vulnerability by crafting a malicious HTML page that, when opened by a user, triggers the use after free condition in the Serviceworker component of Chrome. This can lead to heap corruption, allowing the attacker to execute arbitrary code or cause a denial of service.
Affected Products
- Google Chrome on Desktop: Versions prior to 140.0.7339.127 are affected by this vulnerability, which can lead to severe security risks if exploited.
Mitigation
Users are advised to update their Google Chrome browser to the latest version to mitigate this vulnerability. Regularly updating software helps protect against known vulnerabilities and enhances overall security.