Out-of-Bounds Memory Access Vulnerability in Google Chrome
CVE-2025-12036

Currently unrated

Key Information:

Vendor

Google

Status
Vendor
CVE Published:
6 November 2025

Badges

đź“° News Worthy

What is CVE-2025-12036?

A critical flaw in Google Chrome's V8 engine allows for out-of-bounds memory access, which could be exploited by remote attackers through specially crafted HTML pages. This vulnerability raises significant security concerns as it opens the door for potential unauthorized operations, including remote code execution, compromising users' systems. Users are strongly advised to update to the latest version to mitigate risks.

Affected Version(s)

Chrome 141.0.7390.122

News Articles

CVE-2025-12036 Vulnerability: A New Critical Chrome V8 JavaScript Engine Flaw Enables Attackers to Execute Remote Code on Vulnerable Systems | SOC Prime

Explore CVE-2025-12036 details, a critical Chrome V8 JavaScript engine Vulnerability leading to RCE, with an in-depth overview on our SOC Prime blog.

2 weeks ago

Chrome V8 JavaScript Engine Vulnerability Allows Attackers to Execute Remote Code

The vulnerability was discovered by Google's Big Sleep project on October 15, 2025, marking another significant find by the company's AI-powered security research initiative.

2 weeks ago

References

Timeline

  • Vulnerability published

  • đź“°

    First article discovered by Cyber Press

  • Vulnerability Reserved

.
CVE-2025-12036 : Out-of-Bounds Memory Access Vulnerability in Google Chrome