High WID-SEC-2025-1812 5 CVEs

Google Chrome und Microsoft Edge: Mehrere Schwachstellen ermöglichen Codeausführung

Published Aug 12, 2025 · Updated Nov 24, 2025 · Revision 6 · de-DE

Vendor: Debian Vendor: Fedora Vendor: gentoo Vendor: Google Vendor: Microsoft Vendor: SUSE Product: Chrome Product: Edge Product: Linux Product: Linux Product: Linux Product: openSUSE Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Chrome und Microsoft Edge ausnutzen, um beliebigen Programmcode auszuführen und nicht näher beschriebene Auswirkungen zu erzielen.

Product

Chrome ist ein Internet-Browser von Google.

Vulnerabilities 5

High 8.8

CVE-2025-8879

Heap buffer overflow in libaom in Google Chrome prior to 139.0.7258.127 allowed a remote attacker to potentially exploi…

Google Chrome chromium chromium Browsers Debian Alpine Wolfi

Aug 13, 2025
High 8.8

CVE-2025-8880

Race in V8 in Google Chrome prior to 139.0.7258.127 allowed a remote attacker to execute arbitrary code inside a sandbo…

Google Chrome chromium chromium Browsers Debian Alpine Wolfi

Aug 13, 2025
High 8.8

CVE-2025-8882

Use after free in Aura in Google Chrome prior to 139.0.7258.127 allowed a remote attacker who convinced a user to engag…

Google Chrome chromium chromium Browsers Debian Wolfi

Aug 13, 2025
High 8.8

CVE-2025-8901

Out of bounds write in ANGLE in Google Chrome prior to 139.0.7258.127 allowed a remote attacker to perform out of bound…

Google Chrome chromium chromium Browsers Debian Alpine Wolfi

Aug 13, 2025
Medium 6.5

CVE-2025-8881

Inappropriate implementation in File Picker in Google Chrome prior to 139.0.7258.127 allowed a remote attacker who conv…

Google Chrome chromium chromium Browsers Debian Alpine Wolfi

Aug 13, 2025

Revision history

2025-11-24 #6
Neue Updates von Gentoo aufgenommen
2025-08-21 #5
Neue Updates von Fedora aufgenommen
2025-08-17 #4
Updates von Microsoft aufgenommen
2025-08-14 #3
Neue Updates von openSUSE und Fedora aufgenommen
2025-08-13 #2
Neue Updates von Debian aufgenommen
2025-08-12 #1
Initiale Fassung

References

Google Chrome Stable Channel Update for Desktop vom 2025-08-12
https://chromereleases.googleblog.com/2025/08/stable-channel-update-for-desktop_12.html
Debian Security Advisory DSA-5976 vom 2025-08-14
https://lists.debian.org/debian-security-announce/2025/msg00140.html
openSUSE Security Update OPENSUSE-SU-2025:0297-1 vom 2025-08-14
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/F7FYI3254TIN4R7AQOOPQIDORLJKJNZ6/
Fedora Security Advisory FEDORA-EPEL-2025-77303504F8 vom 2025-08-15
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-77303504f8
Fedora Security Advisory FEDORA-2025-502FAA722E vom 2025-08-15
https://bodhi.fedoraproject.org/updates/FEDORA-2025-502faa722e
Fedora Security Advisory FEDORA-2025-0EA30A8042 vom 2025-08-15
https://bodhi.fedoraproject.org/updates/FEDORA-2025-0ea30a8042
Fedora Security Advisory FEDORA-EPEL-2025-7F8D0718B0 vom 2025-08-15
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2025-7f8d0718b0
Release notes for Microsoft Edge Security Updates vom 2025-08-15
https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security#august-15-2025
openSUSE Security Update OPENSUSE-SU-2025:0301-1 vom 2025-08-15
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/XR23HKUVOUYPDCRWS5UNSJIRAF6VO76O/
openSUSE Security Update OPENSUSE-SU-2025:15444-1 vom 2025-08-16
https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/37HFKDLCRDBYLPNFW4BX7Q5MHGJPLHZI/
Fedora Security Advisory FEDORA-2025-B7CB89DDD3 vom 2025-08-22
https://bodhi.fedoraproject.org/updates/FEDORA-2025-b7cb89ddd3
Gentoo Linux Security Advisory GLSA-202511-04 vom 2025-11-25
https://security.gentoo.org/glsa/202511-04