Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2cw7-hww6-h37w

Опубликовано: 13 авг. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

Use after free in Aura in Google Chrome prior to 139.0.7258.127 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

Use after free in Aura in Google Chrome prior to 139.0.7258.127 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

EPSS

Процентиль: 32%
0.00119
Низкий

8.8 High

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 8.8
ubuntu
2 месяца назад

Use after free in Aura in Google Chrome prior to 139.0.7258.127 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

CVSS3: 8.8
nvd
2 месяца назад

Use after free in Aura in Google Chrome prior to 139.0.7258.127 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

msrc
2 месяца назад

Chromium: CVE-2025-8882 Use after free in Aura

CVSS3: 8.8
debian
2 месяца назад

Use after free in Aura in Google Chrome prior to 139.0.7258.127 allowe ...

CVSS3: 8.8
fstec
2 месяца назад

Уязвимость функции free компонента Aura браузера Google Chrome, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

EPSS

Процентиль: 32%
0.00119
Низкий

8.8 High

CVSS3

Дефекты

CWE-416