Cross-Origin Data Leakage in Google Chrome's V8 Engine

CVE-2025-10890

What is CVE-2025-10890?

A vulnerability in the V8 JavaScript engine of Google Chrome prior to version 140.0.7339.207 allows remote attackers to exploit side-channel information leakage. By crafting a malicious HTML page, an attacker can potentially leak sensitive cross-origin data from the browser. This vulnerability underscores the importance of securing web applications and regularly updating browsers to prevent exploitation.

References