Product:
Chrome
Summary
Use after free in Dawn in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability has a high severity rating and can lead to significant impacts on confidentiality, integrity, and availability.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.8 | CVE-2025-10500 |
Exploitation
An attacker can exploit this vulnerability by crafting a malicious HTML page that, when opened by a user, triggers the use after free condition. This can lead to heap corruption, allowing the attacker to execute arbitrary code or cause a denial of service. User interaction is required to initiate the attack by visiting the crafted page.
Affected Products
- Google Chrome: A web browser that allows users to access the internet and run web applications.
Mitigation
To mitigate this vulnerability, users should update their Google Chrome browser to the latest version. Regularly updating software helps protect against known vulnerabilities and reduces the risk of exploitation.