Product:
Chrome
Summary
Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability has a high severity rating and can lead to significant impacts on confidentiality, integrity, and availability.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.8 | CVE-2025-10892 |
Exploitation
An attacker can exploit this vulnerability by crafting a malicious HTML page that, when opened by a user, triggers the integer overflow in the V8 engine. This can lead to heap corruption, allowing the attacker to execute arbitrary code or cause a denial of service. User interaction is required, as the crafted page must be opened in the browser.
Affected Products
- Google Chrome prior to 140.0.7339.207: Vulnerable to integer overflow in V8, leading to potential heap corruption.
Mitigation
To mitigate this vulnerability, users should update their Google Chrome browser to the latest version. Regularly updating software helps protect against known vulnerabilities and reduces the risk of exploitation.