CVE-2025-5419
HIGH KEVGoogle Chrome < 137.0.7151.68 - Out-of-Bounds Write
Title source: ruleDescription
Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Exploits (7)
nomisec
WORKING POC
92 stars
by mistymntncop · client-side
https://github.com/mistymntncop/CVE-2025-5419
github
WORKING POC
10 stars
by XiaomingX · pythonpoc
https://github.com/XiaomingX/data-cve-poc-py-v1/tree/main/2025/CVE-2025-5419
Scores
CVSS v3
8.8
EPSS
0.0326
EPSS Percentile
87.2%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CISA KEV
2025-06-05
VulnCheck KEV
2025-06-02
ENISA EUVD
EUVD-2025-16695
CWE
CWE-125
CWE-787
Status
published
Products (2)
google/chrome
< 137.0.7151.68
microsoft/edge_chromium
< 137.0.3296.62
Published
Jun 03, 2025
KEV Added
Jun 05, 2025
Tracked Since
Feb 18, 2026