CVE-2025-5419

HIGH KEV

Google Chrome < 137.0.7151.68 - Out-of-Bounds Write

Title source: rule

Description

Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Exploits (7)

nomisec WORKING POC 92 stars
by mistymntncop · client-side
https://github.com/mistymntncop/CVE-2025-5419
nomisec WORKING POC 28 stars
by bjrjk · client-side
https://github.com/bjrjk/CVE-2025-5419
github WORKING POC 10 stars
by XiaomingX · pythonpoc
https://github.com/XiaomingX/data-cve-poc-py-v1/tree/main/2025/CVE-2025-5419
nomisec SCANNER 2 stars
by itsShotgun · poc
https://github.com/itsShotgun/chrome_v8_cve_checker
nomisec WORKING POC
by Riquelme54322 · poc
https://github.com/Riquelme54322/CVE-2025-5419
nomisec SUSPICIOUS
by Riquelme54322 · poc
https://github.com/Riquelme54322/riquelme54322.github.io
nomisec STUB
by riemannj · poc
https://github.com/riemannj/CVE-2025-5419

Scores

CVSS v3 8.8
EPSS 0.0326
EPSS Percentile 87.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CISA KEV 2025-06-05
VulnCheck KEV 2025-06-02
ENISA EUVD EUVD-2025-16695
CWE
CWE-125 CWE-787
Status published
Products (2)
google/chrome < 137.0.7151.68
microsoft/edge_chromium < 137.0.3296.62
Published Jun 03, 2025
KEV Added Jun 05, 2025
Tracked Since Feb 18, 2026