Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2025-2137: Google Chrome: Data Exposure through Malicious Web Content

CVE-2025-2137 · published 1 year ago

Summary

A vulnerability in Google Chrome allows a hacker to access memory outside of its intended boundaries, potentially exposing sensitive data. This could happen when a user views a specially crafted web page. To stay secure, update your Google Chrome browser to the latest version.

What to do

Update google chrome to version 134.0.6998.88 or later.

Affected software

Vendor	Product	Affected versions
google	chrome	< 134.0.6998.88 `cpe:2.3:a:google:chrome::::::::`

Original advisory text

Out of bounds read in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)

References

https://chromereleases.googleblog.com/2025/03/stable-channel-update-for-desktop_... Release Notes
https://issues.chromium.org/issues/398999390 Issue Tracking Permissions Required

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker full control

Severity

8.8 High

Exploitation

<1% chance of attack within 30 days

Type

CWE-125Out-of-bounds Read

Timeline

Published10 Mar 2025

Updated4 Nov 2026

First seen7 Mar 2026

Sources

CVE-2025-2137 · NVD

Track software like this

Free during beta