CVE-2025-11460

HIGH

Google Chrome <141.0.7390.65 - Use After Free

Title source: llm

Description

Use after free in Storage in Google Chrome prior to 141.0.7390.65 allowed a remote attacker to execute arbitrary code via a crafted video file. (Chromium security severity: High)

Exploits (1)

nomisec WORKING POC 1 stars

by lylzjnqe · poc

https://github.com/lylzjnqe/CVE-2025-11460-Chrome-RCE

View Code ZIP pw:eip

References (2)

[Release Notes, Vendor Advisory] https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop.html

[Issue Tracking, Permissions Required] https://issues.chromium.org/issues/446722008

Scores

CVSS v3 8.8

EPSS 0.0011

EPSS Percentile 29.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-416

Status published

Products (1)

google/chrome < 141.0.7390.65

Published Nov 06, 2025

Tracked Since Feb 18, 2026