Out-of-Bounds Memory Access Vulnerability in Google Chrome
CVE-2025-12036

8.8HIGH

Key Information:

Vendor

Google
Status
Chrome
Vendor
CVE Published:
6 November 2025

Badges

📰 News Worthy

What is CVE-2025-12036?

A critical flaw in Google Chrome's V8 engine allows for out-of-bounds memory access, which could be exploited by remote attackers through specially crafted HTML pages. This vulnerability raises significant security concerns as it opens the door for potential unauthorized operations, including remote code execution, compromising users' systems. Users are strongly advised to update to the latest version to mitigate risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Chrome 141.0.7390.122

News Articles

favicon imageSOC Prime

CVE-2025-12036 Vulnerability: A New Critical Chrome V8 JavaScript Engine Flaw Enables Attackers to Execute Remote Code on Vulnerable Systems | SOC Prime

Explore CVE-2025-12036 details, a critical Chrome V8 JavaScript engine Vulnerability leading to RCE, with an in-depth overview on our SOC Prime blog.

favicon imageCyber Press

Chrome V8 JavaScript Engine Vulnerability Allows Attackers to Execute Remote Code

The vulnerability was discovered by Google's Big Sleep project on October 15, 2025, marking another significant find by the company's AI-powered security research initiative.

References

https://chromereleases.googleblog.com/2025/10/stable-chan...
https://issues.chromium.org/issues/452296415

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • 📰

    First article discovered by Cyber Press

  • Vulnerability Reserved

JSON
.