A use after free vulnerability in ANGLE in Google Chrome prior to version 139.0.7258.154 allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability has been classified with a critical severity level by Chromium security.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.8 | CVE-2025-9478 |
Exploitation
To exploit this vulnerability, an attacker can create a specially crafted HTML page that, when opened by a user in an affected version of Google Chrome, can lead to heap corruption. This requires the user to interact with the malicious page, making user interaction a necessary component of the exploit.
Affected Products
- Google Chrome: All versions prior to 139.0.7258.154 are affected by this vulnerability.
Mitigation
Users are advised to update their Google Chrome browser to the latest version to mitigate this vulnerability. Regularly updating software can help protect against known vulnerabilities and exploits.