CVE-2025-9132

Published Aug 20, 2025

Last updated 2 months ago

Google Chrome V8

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-9132 is a high-severity vulnerability affecting Google Chrome's V8 JavaScript engine. It is classified as an out-of-bounds write issue, meaning that the program can write data beyond the allocated memory buffer. This can lead to memory corruption and allow attackers to gain unauthorized control over system processes. The vulnerability was discovered by Google's Big Sleep AI on August 4, 2025. Successful exploitation of CVE-2025-9132 could allow attackers to execute arbitrary code remotely, bypass Chrome's security sandbox, access sensitive user data, or cause a denial-of-service condition by crashing the browser. The vulnerability affects Chrome versions before 139.0.7258.138 for Windows and macOS, and 139.0.7258.138 for Linux. Google has released an emergency security update to address the vulnerability.

Description: Out of bounds write in V8 in Google Chrome prior to 139.0.7258.138 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Source: chrome-cve-admin@google.com
NVD status: Analyzed
Products: chrome

Risk scores

CVSS 3.1

Type: Secondary
Base score: 8.8
Impact score: 5.9
Exploitability score: 2.8
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity: HIGH

Weaknesses

chrome-cve-admin@google.com: CWE-787

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "356EE5BC-F2EA-4054-9219-B9B7EC916594",
            "versionEndExcluding": "139.0.7258.138"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"
          },
          {
            "criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  }
]

References

Sources include official advisories and independent security research.