CVE-2025-9478

HIGH

Google Chrome <139.0.7258.154 - Use After Free

Title source: llm

Description

Use after free in ANGLE in Google Chrome prior to 139.0.7258.154 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)

Exploits (1)

nomisec WRITEUP
by Kamgreen50 · poc
https://github.com/Kamgreen50/STIG-Edge-RCE-CVE2025-9478

References (2)

Scores

CVSS v3 8.8
EPSS 0.0016
EPSS Percentile 36.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-416
Status published
Products (1)
google/chrome < 139.0.7258.154
Published Aug 26, 2025
Tracked Since Feb 18, 2026