CVE-2025-1920

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Mar 10, 2025
Updated: Apr 7, 2025
CWE ID 843

Summary

CVE-2025-1920 is a type confusion vulnerability affecting Google Chrome versions prior to 134.0.6998.88. This issue, of high severity, lies within V8, the browser's JavaScript engine. A remote attacker can potentially exploit this vulnerability by using a maliciously crafted HTML page. The type confusion leads to heap corruption, posing a significant threat to users' security.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share