CVE-2025-10500

Published Sep 24, 2025

Last updated 4 months ago

Google Chrome

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-10500 is a use-after-free vulnerability found in the Dawn component of Google Chrome's WebGPU implementation. This flaw occurs due to improper memory management within Dawn, where memory is freed but remains accessible through dangling pointers after certain WebGPU operations. An attacker could exploit this vulnerability by creating a malicious HTML page that, when opened in a vulnerable Chrome browser, triggers the use-after-free condition, potentially leading to heap corruption and arbitrary code execution. Google addressed this vulnerability in Chrome version 140.0.7339.185 for Linux and 140.0.7339.185/.186 for Windows and Mac.

Description: Use after free in Dawn in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Source: chrome-cve-admin@google.com
NVD status: Analyzed
Products: chrome

Risk scores

CVSS 3.1

Type: Secondary
Base score: 8.8
Impact score: 5.9
Exploitability score: 2.8
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity: HIGH

Weaknesses

chrome-cve-admin@google.com: CWE-416

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7857C78B-3F28-4180-AE76-ABF96A380265",
            "versionEndExcluding": "140.0.7339.185"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  }
]

References

Sources include official advisories and independent security research.