CVE-2025-3066

CVSS 3.1 Score 8.8 of 10 (high)

Details

Published Apr 2, 2025
Updated: Apr 8, 2025
CWE ID 416

Summary

CVE-2025-3066 is a high-severity vulnerability in Google Chrome versions prior to 135.0.7049.84. This issue involves a use-after-free condition in the Site Isolation feature, which can lead to heap corruption. A remote attacker could potentially exploit this flaw by crafting a malicious HTML page. Successful exploitation could allow the attacker to execute arbitrary code or cause the browser to crash, posing a significant risk to users.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share