Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2025-8882

Опубликовано: 13 авг. 2025
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS3: 8.8

Описание

Use after free in Aura in Google Chrome prior to 139.0.7258.127 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

РелизСтатусПримечание
devel

not-affected

code not present
esm-apps/noble

not-affected

code not present
jammy

not-affected

code not present
noble

not-affected

code not present
plucky

not-affected

code not present
upstream

released

Показывать по

EPSS

Процентиль: 33%
0.00129
Низкий

8.8 High

CVSS3

Связанные уязвимости

CVSS3: 8.8
nvd
5 месяцев назад

Use after free in Aura in Google Chrome prior to 139.0.7258.127 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

msrc
5 месяцев назад

Chromium: CVE-2025-8882 Use after free in Aura

CVSS3: 8.8
debian
5 месяцев назад

Use after free in Aura in Google Chrome prior to 139.0.7258.127 allowe ...

CVSS3: 8.8
github
5 месяцев назад

Use after free in Aura in Google Chrome prior to 139.0.7258.127 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

CVSS3: 8.8
fstec
5 месяцев назад

Уязвимость функции free компонента Aura браузера Google Chrome, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

EPSS

Процентиль: 33%
0.00129
Низкий

8.8 High

CVSS3