High 1 exploited CVE DSA-6004-1 4 CVEs

chromium - security update

Published Sep 19, 2025 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

Release	Package	Fixed in
Debian · 12	chromium	140.0.7339.185-1~deb12u1
Debian · 13	chromium	140.0.7339.185-1~deb13u1

Vulnerabilities 4

High 8.8

CVE-2025-10585 Exploited Public exploit

Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap cor…

Google Chrome chromium chromium Browsers Debian Azure Linux Wolfi

Sep 24, 2025
KEV Sep 23, 2025
High 8.8

CVE-2025-10500

Use after free in Dawn in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap c…

Google Chrome chromium chromium Browsers Debian Alpine Wolfi

Sep 24, 2025
High 8.8

CVE-2025-10501

Use after free in WebRTC in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap…

Google Chrome chromium chromium Browsers Debian Alpine Wolfi

Sep 24, 2025
High 8.8

CVE-2025-10502

Heap buffer overflow in ANGLE in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit…

Google Chrome chromium chromium Browsers Debian Azure Linux Alpine Wolfi

Sep 24, 2025