← back
CVE-2025-6191

CVE-2025-6191

CVSS 8.8 HIGHEPSS 8.8%CWE-190CWE-472
In short

An integer overflow flaw in Google Chrome's V8 engine allows attackers to access memory beyond proper boundaries through a malicious webpage, potentially leading to data theft or system compromise.

Technical detail

Integer overflow in V8's arithmetic operations permits out-of-bounds memory access when processing crafted HTML; remote attack vector via malicious webpage; requires user interaction (page load); impacts confidentiality and integrity.

Summary generated and translated by AI from the official description.
Integer overflow in V8 in Google Chrome prior to 137.0.7151.119 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Google · Chrome

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →