Critical 1 exploited CVE WID-SEC-2025-0515 5 CVEs

Google Chrome und Microsoft Edge: Mehrere Schwachstellen

Published Mar 10, 2025 · Updated Jul 8, 2025 · Revision 5 · de-DE

Vendor: Debian Vendor: Fedora Vendor: gentoo Vendor: Google Vendor: Microsoft Vendor: SUSE Product: Chrome Product: Edge Product: Linux Product: Linux Product: Linux Product: openSUSE Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Chrome und Microsoft Edge ausnutzen, um einen Denial-of-Service-Zustand auszulösen, beliebigen Code auszuführen, Daten zu manipulieren, vertrauliche Informationen preiszugeben und Sicherheitsmaßnahmen zu umgehen.

Product

Chrome ist ein Internet-Browser von Google.
Edge ist ein Web Browser von Microsoft.

Vulnerabilities 5

Critical 10.0

CVE-2025-24201 Exploited Public exploit

An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in…

Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu Alpine

Mar 11, 2025
KEV Mar 13, 2025
High 8.8

CVE-2025-1920

Type Confusion in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corr…

Google Chrome chromium chromium Browsers Debian Azure Linux Wolfi

Mar 10, 2025
High 8.8

CVE-2025-2135 Public exploit

Type Confusion in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corr…

Google Chrome chromium chromium Browsers Debian Azure Linux Wolfi

Mar 10, 2025
High 8.8

CVE-2025-2136

Use after free in Inspector in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit he…

Google Chrome chromium chromium Browsers Debian Alpine Wolfi

Mar 10, 2025
High 8.8

CVE-2025-2137

Out of bounds read in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to perform out of bounds mem…

Google Chrome chromium chromium Browsers Debian Azure Linux Wolfi

Mar 10, 2025

Revision history

2025-07-08 #5
Neue Updates von Gentoo aufgenommen
2025-06-24 #4
Neue Updates von Elastic aufgenommen
2025-03-16 #3
Neue Updates von openSUSE und Fedora aufgenommen
2025-03-12 #2
Neue Updates von Microsoft aufgenommen; CVE-2025-24201 aktiv ausgenutzt
2025-03-10 #1
Initiale Fassung

References

Google Chrome Stable Channel Update vom 2025-03-10
https://chromereleases.googleblog.com/2025/03/stable-channel-update-for-desktop_10.html
Cybersecuritynews Artikel vom 2025-03-11
https://cybersecuritynews.com/patch-for-multiple-high-severity-vulnerabilities/
Release notes for Microsoft Edge Security Updates vom 2025-03-12
https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security
Fedora Security Advisory FEDORA-2025-D5935F40AF vom 2025-03-13
https://bodhi.fedoraproject.org/updates/FEDORA-2025-d5935f40af
Debian Security Advisory DSA-5877 vom 2025-03-12
https://lists.debian.org/debian-security-announce/2025/msg00039.html
openSUSE Security Update OPENSUSE-SU-2025:0089-1 vom 2025-03-12
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/IUJOIGA32OMEEIDD5K4DHA5H5SKVHFCA/
Fedora Security Advisory FEDORA-EPEL-2025-E114FFCACA vom 2025-03-13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-e114ffcaca
Fedora Security Advisory FEDORA-2025-8FDC09E745 vom 2025-03-13
https://bodhi.fedoraproject.org/updates/FEDORA-2025-8fdc09e745
Fedora Security Advisory FEDORA-EPEL-2025-6EAD1A3665 vom 2025-03-13
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-6ead1a3665
openSUSE Security Update OPENSUSE-SU-2025:14888-1 vom 2025-03-14
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/RWBUVBTHRK27VE353OCMA3QUHYKSCJOM/
Fedora Security Advisory FEDORA-2025-6B9CBDBDFF vom 2025-03-15
https://bodhi.fedoraproject.org/updates/FEDORA-2025-6b9cbdbdff
Elastic Security Announcement ESA-2025-09 vom 2025-06-24
https://discuss.elastic.co/t/kibana-7-17-29-8-17-8-8-18-3-9-0-3-security-update-esa-2025-09/379443
Gentoo Linux Security Advisory GLSA-202507-07 vom 2025-07-09
https://security.gentoo.org/glsa/202507-07