CVE-2025-3066

Опубликовано: 02 апр. 2025

Источник: nvd

CVSS3: 8.8

EPSS Низкий

Описание

Use after free in Site Isolation in Google Chrome prior to 135.0.7049.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Ссылки

https://chromereleases.googleblog.com/2025/04/stable-channel-update-for-desktop.html
Release Notes
https://issues.chromium.org/issues/405140652
Issue Tracking
Permissions Required

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

Версия до 135.0.7049.52 (исключая)

EPSS

Процентиль: 35%

0.00421

Низкий

8.8 High

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVE-2025-3066

CVSS3: 8.8

ubuntu

больше 1 года назад

Use after free in Site Isolation in Google Chrome prior to 135.0.7049.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2025-3066

msrc

больше 1 года назад

Chromium: CVE-2025-3066 Use after free in Site Isolation

CVE-2025-3066

CVSS3: 8.8

debian

больше 1 года назад

Use after free in Site Isolation in Google Chrome prior to 135.0.7049. ...

openSUSE-SU-2025:0120-1

suse-cvrf

больше 1 года назад

Security update for chromium

GHSA-mw9f-cfv6-v3rg

CVSS3: 8.8

github

больше 1 года назад

Use after free in Navigations in Google Chrome prior to 135.0.7049.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

EPSS

Процентиль: 35%

0.00421

Низкий

8.8 High

CVSS3

Дефекты

CWE-416