Product:
Chrome
Summary
Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability has a high severity rating and can lead to significant impacts on confidentiality, integrity, and availability.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.8 | CVE-2025-10891 |
Exploitation
An attacker can exploit this vulnerability by crafting a malicious HTML page that, when opened by a user, triggers the integer overflow in the V8 engine. This can lead to heap corruption, allowing the attacker to execute arbitrary code or cause a denial of service. User interaction is required, as the crafted page must be opened in the browser.
Affected Products
- Google Chrome: Affected versions prior to 140.0.7339.207 are vulnerable to this integer overflow issue.
Mitigation
Users are advised to update their Google Chrome browser to the latest version to mitigate this vulnerability. Regularly updating software can help protect against known vulnerabilities and exploits.