A use after free vulnerability in ANGLE in Google Chrome prior to version 139.0.7258.154 allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This issue has been classified with a critical severity level by Chromium security.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.8 | CVE-2025-9478 |
Exploitation
To exploit this vulnerability, an attacker can craft a malicious HTML page that, when opened by a user in an affected version of Google Chrome, can lead to heap corruption. This requires the user to interact with the page, making user interaction a necessary component of the exploit.
Affected Products
- Google Chrome versions prior to 139.0.7258.154 – vulnerable to heap corruption via crafted HTML.
Mitigation
Users are advised to update their Google Chrome browser to the latest version to mitigate this vulnerability. Regularly updating software can help protect against known vulnerabilities.