Product:
Chrome
Summary
Side-channel information leakage in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to leak cross-origin data via a crafted HTML page. This vulnerability has been classified with a high severity level due to its potential impact on confidentiality and integrity.
Details
| Severity | Base Score | CVE |
|---|---|---|
| CRITICAL | 9.1 | CVE-2025-10890 |
Exploitation
An attacker can exploit this vulnerability by crafting a malicious HTML page that, when visited by a user, can leak sensitive cross-origin data. The attack does not require any user interaction or special privileges, making it easier for attackers to execute.
Affected Products
- Google Chrome: All versions prior to 140.0.7339.207 are affected by this vulnerability.
Mitigation
To mitigate this vulnerability, users should update their Google Chrome browser to the latest version. Regularly updating software helps protect against known vulnerabilities and enhances overall security.