Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2025-3620

Опубликовано: 16 апр. 2025
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 8.8

Описание

Use after free in USB in Google Chrome prior to 135.0.7049.95 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

РелизСтатусПримечание
devel

not-affected

code not present
esm-apps/noble

not-affected

code not present
esm-infra/focal

DNE

focal was not-affected [code not present]
focal

not-affected

code not present
jammy

not-affected

code not present
noble

not-affected

code not present
oracular

not-affected

code not present
plucky

not-affected

code not present
upstream

released

Показывать по

EPSS

Процентиль: 20%
0.00064
Низкий

8.8 High

CVSS3

Связанные уязвимости

CVSS3: 8.8
nvd
2 месяца назад

Use after free in USB in Google Chrome prior to 135.0.7049.95 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

msrc
2 месяца назад

Chromium: CVE-2025-3620 Use after free in USB

CVSS3: 8.8
debian
2 месяца назад

Use after free in USB in Google Chrome prior to 135.0.7049.95 allowed ...

CVSS3: 8.8
github
2 месяца назад

Use after free in USB in Google Chrome prior to 135.0.7049.95 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVSS3: 8.8
fstec
2 месяца назад

Уязвимость интерфейса для подключения периферийных устройств USB браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 20%
0.00064
Низкий

8.8 High

CVSS3

Уязвимость CVE-2025-3620