CVE-2025-5959
NoneCVSS
—
EPSS
13.3%
Published
Jun 11, 2025
CISA due date
—
The record
Type Confusion in V8 in Google Chrome prior to 137.0.7151.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Chainguard | chromium | 0 | 137.0.7151.103-r0 |
| Chainguard | chromium-docker-selenium-compat | 0 | 137.0.7151.103-r0 |
| Chainguard | chromium-lang | 0 | 137.0.7151.103-r0 |
| Chainguard | chromium-qt | 0 | 137.0.7151.103-r0 |
| Debian:11 | chromium | 0 | No fix |
| Debian:12 | chromium | 0 | No fix |
| Debian:13 | chromium | 0 | No fix |
| Debian:14 | chromium | 0 | 137.0.7151.103-1 |
| Mageia:9 | chromium-browser-stable | 0 | 136.0.7103.113-2.mga9.tainted |
| Wolfi | chromium | 0 | 137.0.7151.103-r0 |
| Wolfi | chromium-docker-selenium-compat | 0 | 137.0.7151.103-r0 |
| Wolfi | chromium-lang | 0 | 137.0.7151.103-r0 |
| Wolfi | chromium-qt | 0 | 137.0.7151.103-r0 |
| openSUSE:Tumbleweed | chromium | 0 | 138.0.7204.96-1.1 |
Related vulnerabilities
- CVE-2026-4453 Integer overflow in Dawn in Google Chrome on Mac prior to 146.0.7680.153 allowed a remote… Also affects chromium
- CVE-2026-3942 Incorrect security UI in PictureInPicture in Google Chrome prior to 146.0.7680.71 allowed… Also affects chromium
- CVE-2026-3934 Insufficient policy enforcement in ChromeDriver in Google Chrome prior to 146.0.7680.71… Also affects chromium
- CVE-2026-3936 Use after free in WebView in Google Chrome on Android prior to 146.0.7680.71 allowed a… Also affects chromium
- CVE-2026-3938 Insufficient policy enforcement in Clipboard in Google Chrome prior to 146.0.7680.71… Also affects chromium
- CVE-2026-3940 Insufficient policy enforcement in DevTools in Google Chrome prior to 146.0.7680.71… Also affects chromium
- CVE-2026-3941 Insufficient policy enforcement in DevTools in Google Chrome prior to 146.0.7680.71… Also affects chromium
- CVE-2026-3935 Incorrect security UI in WebAppInstalls in Google Chrome prior to 146.0.7680.71 allowed a… Also affects chromium