CVE-2025-8010
- EPSS 0.1%
- Published 22.07.2025 21:11:18
- Last modified 26.09.2025 17:33:32
Type Confusion in V8 in Google Chrome prior to 138.0.7204.168 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2025-8011
- EPSS 0.1%
- Published 22.07.2025 21:11:18
- Last modified 26.09.2025 17:33:44
Type Confusion in V8 in Google Chrome prior to 138.0.7204.168 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2025-6558
- EPSS 0.05%
- Published 15.07.2025 18:15:24
- Last modified 23.07.2025 01:00:01
Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2025-7656
- EPSS 0.1%
- Published 15.07.2025 18:15:24
- Last modified 16.07.2025 14:28:06
Integer overflow in V8 in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2025-7657
- EPSS 0.17%
- Published 15.07.2025 18:15:24
- Last modified 16.07.2025 14:27:43
Use after free in WebRTC in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2025-6554
- EPSS 0.12%
- Published 30.06.2025 21:14:14
- Last modified 16.07.2025 14:13:52
Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)
CVE-2025-6555
- EPSS 0.05%
- Published 24.06.2025 20:03:31
- Last modified 02.07.2025 17:15:52
Use after free in Animation in Google Chrome prior to 138.0.7204.49 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
CVE-2025-6556
- EPSS 0.02%
- Published 24.06.2025 20:03:31
- Last modified 02.07.2025 17:15:28
Insufficient policy enforcement in Loader in Google Chrome prior to 138.0.7204.49 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromium security severity: Low)
CVE-2025-6557
- EPSS 0.07%
- Published 24.06.2025 20:03:31
- Last modified 15.07.2025 18:26:56
Insufficient data validation in DevTools in Google Chrome on Windows prior to 138.0.7204.49 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severit...
CVE-2025-6191
- EPSS 0.07%
- Published 18.06.2025 18:16:36
- Last modified 03.07.2025 16:12:00
Integer overflow in V8 in Google Chrome prior to 137.0.7151.119 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)