Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-0416 State: PUBLISHED Published: 2025-04-01T04:05:14.236Z Last Updated: 2025-04-01T14:13:36.829Z Vendors: Valmet Products: Valmet DNA Problem Types: CWE-269 Description: Local privilege escalation through insecure DCOM configuration in Valmet DNA versions prior to C2023. The DCOM object Valmet DNA Engineering has permissions that allow it to run commands as a user with the SeImpersonatePrivilege privilege. The SeImpersonatePrivilege privilege is a Windows permission that allows a process to impersonate another user. An attacker can use this vulnerability to escalate their privileges and take complete control of the system. Additional Analyst Notes: - CISA ADP Vulnrichment: R
escalate their privileges and take complete control of the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.valmet.com/about-us/about/research-and-development/vulnerabilityadvisories/cve-2025-0416/
CVE ID: CVE-2025-0417 State: PUBLISHED Published: 2025-04-01T04:02:54.268Z Last Updated: 2025-04-01T14:13:23.620Z Vendors: Valmet Products: Valmet DNA Problem Types: CWE-307 Description: Lack of protection against brute force attacks in Valmet DNA visualization in DNA Operate. The possibility to make an arbitrary number of login attempts without any rate limit gives an attacker an increased chance of guessing passwords and then performing switching operations. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.valmet.com/about-us/about/research-and-development/vulnerabilityadvisories/cve-2025-0417/
CVE ID: CVE-2025-0418 State: PUBLISHED Published: 2025-04-01T03:59:40.489Z Last Updated: 2025-04-01T14:13:12.389Z Vendors: Valmet Products: Valmet DNA Problem Types: CWE-312 Description: Valmet DNA user passwords in plain text. This practice poses a security risk as attackers who gain access to local project data can read the passwords. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.valmet.com/about-us/about/research-and-development/vulnerabilityadvisories/cve-2025-0418/
CVE ID: CVE-2025-0419 State: PUBLISHED Published: 2025-09-17T08:20:40.788Z Last Updated: 2025-09-17T12:58:57.375Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: Zirve Information Technologies Inc. Products: Zirve Nova Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Zirve Information Technologies Inc. Zirve Nova allows Cross-Site Scripting (XSS).This issue affects Zirve Nova: from 235 through 20250131. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0260
CVE ID: CVE-2025-0420 State: PUBLISHED Published: 2025-09-17T09:14:03.419Z Last Updated: 2025-09-17T13:03:27.095Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: Paraşüt Software Products: Paraşüt Problem Types: CWE-79 Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Paraşüt Software Paraşüt allows Cross-Site Scripting (XSS).This issue affects Paraşüt: from 0.0.0.65efa44e through 20250204. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0261
CVE ID: CVE-2025-0421 State: PUBLISHED Published: 2025-11-19T13:28:36.779Z Last Updated: 2025-11-19T14:27:51.882Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: Shopside Software Technologies Inc. Products: Shopside Problem Types: CWE-1021 Description: Improper Restriction of Rendered UI Layers or Frames vulnerability in Shopside Software Technologies Inc. Shopside allows iFrame Overlay.This issue affects Shopside: through 05022025. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0402
CVE ID: CVE-2025-0422 State: PUBLISHED Published: 2025-02-18T07:57:04.886Z Last Updated: 2025-02-18T15:05:48.995Z Vendors: Cordaware Products: bestinformed Web Problem Types: CWE-20 Description: An authenticated user in the "bestinformed Web" application can execute commands on the underlying server running the application. (Remote Code Execution) For this, the user must be able to create "ScriptVars" with the type „script" and preview them by, for example, creating a new "Info". By default, admin users have those permissions, but with the granular permission system, those permissions may be assigned to other users. An attacker is able to execute commands on the server running the "bestinfor
permissions may be assigned to other users. An attacker is able to execute commands on the server running the "bestinformed Web" application if an account with the correct permissions was compromised before. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cordaware.com/changelog/en/version-6_4_0_4-release-13_02_2025.html
CVE ID: CVE-2025-0423 State: PUBLISHED Published: 2025-02-18T07:57:17.412Z Last Updated: 2025-02-18T14:49:45.731Z Vendors: Cordaware Products: bestinformed Web Problem Types: CWE-20 Description: In the "bestinformed Web" application, some user input was not properly sanitized. This leads to multiple unauthenticated stored cross-site scripting vulnerabilities. An unauthenticated attacker is able to compromise the sessions of users on the server by injecting JavaScript code into their session using an "Unauthenticated Stored Cross-Site Scripting". The attacker is then able to ride the session of those users and can abuse their privileges on the "bestinformed Web" application. Additional Analys
ride the session of those users and can abuse their privileges on the "bestinformed Web" application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cordaware.com/changelog/en/version-6_4_0_4-release-13_02_2025.html
CVE ID: CVE-2025-0424 State: PUBLISHED Published: 2025-02-18T07:57:25.806Z Last Updated: 2025-02-18T14:44:30.277Z Vendors: Cordaware Products: bestinformed Web Problem Types: CWE-20 Description: In the "bestinformed Web" application, some user input was not properly sanitized. This leads to multiple authenticated stored cross-site scripting vulnerabilities. An authenticated attacker is able to compromise the sessions of other users on the server by injecting JavaScript code into their session using an "Authenticated Stored Cross-Site Scripting". Those other users might have more privileges than the attacker, enabling a form of horizontal movement. Additional Analyst Notes: - CISA ADP Vulnric
more privileges than the attacker, enabling a form of horizontal movement. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cordaware.com/changelog/en/version-6_4_0_4-release-13_02_2025.html
CVE ID: CVE-2025-0425 State: PUBLISHED Published: 2025-02-18T07:57:35.329Z Last Updated: 2025-02-18T14:32:08.718Z Vendors: Cordaware Products: bestinformed Infoclient Problem Types: CWE-15 Description: Via the GUI of the "bestinformed Infoclient", a low-privileged user is by default able to change the server address of the "bestinformed Server" to which this client connects. This is dangerous as the "bestinformed Infoclient" runs with elevated permissions ("nt authority\system"). By changing the server address to a malicious server, or a script simulating a server, the user is able to escalate his privileges by abusing certain features of the "bestinformed Web" server. Those features include
is able to escalate his privileges by abusing certain features of the "bestinformed Web" server. Those features include: * Pushing of malicious update packages * Arbitrary Registry Read as "nt authority\system" An attacker is able to escalate his privileges to "nt authority\system" on the Windows client running the "bestinformed Infoclient". This attack is not possible if a custom configuration ("Infoclient.ini") containing the flags "ShowOnTaskbar=false" or "DisabledItems=stPort,stAddress" is deployed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cordaware.com/changelog/en/version-6_3_8_1.html
CVE ID: CVE-2025-0426 State: PUBLISHED Published: 2025-02-13T15:16:13.703Z Last Updated: 2025-02-13T17:02:37.167Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Kubernetes Products: kubelet Problem Types: CWE-400 Description: A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by filling the Node's disk. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/kubernetes/kubernetes/issues/130016 - https://groups.google.com/g/kubernetes-security-announce/c/KiODfu8i6w
//github.com/kubernetes/kubernetes/issues/130016 - https://groups.google.com/g/kubernetes-security-announce/c/KiODfu8i6w8
CVE ID: CVE-2025-0427 State: PUBLISHED Published: 2025-05-02T09:58:00.766Z Last Updated: 2025-05-12T15:52:34.904Z Vendors: Arm Ltd Products: Bifrost GPU Kernel Driver, Valhall GPU Kernel Driver, Arm 5th Gen GPU Architecture Kernel Driver Problem Types: CWE-416 Description: Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU processing operations to gain access to already freed memory.This issue affects Bifrost GPU Kernel Driver: from r8p0 through r49p3, from r50p0 through r51p0; Valhall GPU Kernel Driver: from r19p0 through r49p3
PU Kernel Driver: from r8p0 through r49p3, from r50p0 through r51p0; Valhall GPU Kernel Driver: from r19p0 through r49p3, from r50p0 through r53p0; Arm 5th Gen GPU Architecture Kernel Driver: from r41p0 through r49p3, from r50p0 through r53p0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://developer.arm.com/documentation/110465/latest/
CVE ID: CVE-2025-0428 State: PUBLISHED Published: 2025-01-22T07:29:40.161Z Last Updated: 2025-01-22T14:26:28.463Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: senols Products: AI Power: Complete AI Pack Problem Types: CWE-502 Description: The "AI Power: Complete AI Pack" plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.8.96 via deserialization of untrusted input from the $form['post_content'] variable through the wpaicg_export_prompts function. This allows authenticated attackers, with administrative privileges, to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a POP chain is present v
rative privileges, to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/66a3abc1-0508-4ce3-952b-7dbf3738879a?source=cve - https://plugins.trac.wordpress.org/changeset/3224162/
CVE ID: CVE-2025-0429 State: PUBLISHED Published: 2025-01-22T07:29:40.953Z Last Updated: 2025-01-22T14:23:17.631Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: senols Products: AI Power: Complete AI Pack Problem Types: CWE-502 Description: The "AI Power: Complete AI Pack" plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.8.96 via deserialization of untrusted input from the $form['post_content'] variable through the wpaicg_export_ai_forms() function. This allows authenticated attackers, with administrative privileges, to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a POP chain is presen
istrative privileges, to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/bb927aba-a96d-47b9-ba35-60945ea5cfe5?source=cve - https://plugins.trac.wordpress.org/changeset/3224162/
CVE ID: CVE-2025-0430 State: PUBLISHED Published: 2025-01-17T17:34:26.652Z Last Updated: 2025-01-21T15:40:54.429Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Belledonne Communications Products: Linphone-Desktop Problem Types: CWE-476 Description: Belledonne Communications Linphone-Desktop is vulnerable to a NULL Dereference vulnerability, which could allow a remote attacker to create a denial-of-service condition. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-014-04
CVE ID: CVE-2025-0431 State: PUBLISHED Published: 2025-03-19T16:18:23.793Z Last Updated: 2025-03-19T17:38:26.546Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N) Vendors: Proofpoint Products: Enterprise Protection Problem Types: CWE-790 Description: Enterprise Protection contains a vulnerability in URL rewriting that allows an unauthenticated remote attacker to send an email which bypasses URL protections impacting the integrity of recipient's email. This occurs due to improper filtering of backslashes within URLs and affects all versions of 8.21, 8.20 and 8.18 prior to 8.21.0 patch 5115, 8.20.6 patch 5114 and 8.18.6 patch 5113 respectively. Additional Analyst Notes:
.20 and 8.18 prior to 8.21.0 patch 5115, 8.20.6 patch 5114 and 8.18.6 patch 5113 respectively. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2025-0001
CVE ID: CVE-2025-0432 State: PUBLISHED Published: 2025-01-28T15:56:10.373Z Last Updated: 2025-01-28T16:32:42.081Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: HMS Networks Products: Ewon Flexy 202 Problem Types: CWE-319 Description: EWON Flexy 202 transmits user credentials in clear text with no encryption when a user is added, or user credentials are changed via its webpage. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-023-06 - https://www.hms-networks.com/cyber-security - https://hmsnetworks.blob.core.windows.net/nlw/docs/default-source/products/ewon/manuals-and-guides---install
-security - https://hmsnetworks.blob.core.windows.net/nlw/docs/default-source/products/ewon/manuals-and-guides---installation-guides/best-practices-for-a-secure-usage-of-the-ewon-solution-en.pdf?sfvrsn=37160847_4 - https://support.hms-networks.com/hc/en-us/articles/19393244940818-How-to-block-all-the-unused-Ewon-Flexy-Cosy131-services-on-the-LAN-WAN-and-or-VPN-interface
CVE ID: CVE-2025-0433 State: PUBLISHED Published: 2025-03-04T08:23:42.853Z Last Updated: 2025-03-04T14:23:01.283Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: litonice13 Products: Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations Problem Types: CWE-79 Description: The Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 2.0.7.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticate
d including, 2.0.7.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c693831f-fe60-4548-83aa-4ebd03d134ec?source=cve - https://plugins.trac.wordpress.org/browser/master-addons/trunk/addons/ma-tabs/ma-tabs.php#L568 - https://plugins.trac.wordpress.org/browser/master-addons/trunk/addons/ma-image-hover-effects/ma-image-hover-effects.php#L1117 - https://wordpress.org/plug
/browser/master-addons/trunk/addons/ma-image-hover-effects/ma-image-hover-effects.php#L1117 - https://wordpress.org/plugins/master-addons/#developers - https://plugins.trac.wordpress.org/changeset/3243199/
CVE ID: CVE-2025-0434 State: PUBLISHED Published: 2025-01-15T10:58:51.905Z Last Updated: 2025-03-14T15:30:42.628Z Vendors: Google Products: Chrome Problem Types: Out of bounds memory access Description: Out of bounds memory access in V8 in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/01/stable-channel-update-for-desktop_14.html - https://issues.chromium.org/issues/374627491
CVE ID: CVE-2025-0435 State: PUBLISHED Published: 2025-01-15T10:58:52.176Z Last Updated: 2025-03-19T20:50:16.756Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Navigation in Google Chrome on Android prior to 132.0.6834.83 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/01/stable-channel-update-for-desktop_14.html - https://issues.chromium.org/issues/379652406
CVE ID: CVE-2025-0436 State: PUBLISHED Published: 2025-01-15T10:58:52.562Z Last Updated: 2025-03-18T20:08:32.291Z Vendors: Google Products: Chrome Problem Types: CWE-472 Description: Integer overflow in Skia in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/01/stable-channel-update-for-desktop_14.html - https://issues.chromium.org/issues/382786791
CVE ID: CVE-2025-0437 State: PUBLISHED Published: 2025-01-15T10:58:52.779Z Last Updated: 2025-02-03T18:36:42.646Z Vendors: Google Products: Chrome Problem Types: CWE-125 Description: Out of bounds read in Metrics in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/01/stable-channel-update-for-desktop_14.html - https://issues.chromium.org/issues/378623799
CVE ID: CVE-2025-0438 State: PUBLISHED Published: 2025-01-15T10:58:52.981Z Last Updated: 2025-03-20T13:35:10.929Z Vendors: Google Products: Chrome Problem Types: CWE-121 Description: Stack buffer overflow in Tracing in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/01/stable-channel-update-for-desktop_14.html - https://issues.chromium.org/issues/384186539
CVE ID: CVE-2025-0439 State: PUBLISHED Published: 2025-01-15T10:58:53.334Z Last Updated: 2025-03-17T15:18:32.108Z Vendors: Google Products: Chrome Problem Types: CWE-362 Description: Race in Frames in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/01/stable-channel-update-for-desktop_14.html - https://issues.chromium.org/issues/371247941
CVE ID: CVE-2025-0440 State: PUBLISHED Published: 2025-01-15T10:58:53.511Z Last Updated: 2025-03-18T20:45:17.138Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Fullscreen in Google Chrome on Windows prior to 132.0.6834.83 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/01/stable-channel-update-for-desktop_14.html - https://issues.chromium.org/issues/40067914
CVE ID: CVE-2025-0441 State: PUBLISHED Published: 2025-01-15T10:58:53.709Z Last Updated: 2025-03-18T14:36:46.394Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Fenced Frames in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to obtain potentially sensitive information from the system via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/01/stable-channel-update-for-desktop_14.html - https://issues.chromium.org/issues/368628042
CVE ID: CVE-2025-0442 State: PUBLISHED Published: 2025-01-15T10:58:53.903Z Last Updated: 2025-03-14T17:07:42.548Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Payments in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/01/stable-channel-update-for-desktop_14.html - https://issues.chromium.org/issues/40940854
CVE ID: CVE-2025-0443 State: PUBLISHED Published: 2025-01-15T10:58:54.090Z Last Updated: 2025-03-19T18:09:13.686Z Vendors: Google Products: Chrome Problem Types: Insufficient data validation Description: Insufficient data validation in Extensions in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/01/stable-channel-update-for-desktop_14.html - https://issues.chromium.org/issues/376625003
CVE ID: CVE-2025-0444 State: PUBLISHED Published: 2025-02-04T18:53:06.437Z Last Updated: 2025-02-07T21:25:12.144Z Vendors: Google Products: Chrome Problem Types: CWE-416 Description: Use after free in Skia in Google Chrome prior to 133.0.6943.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/02/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/390889644
CVE ID: CVE-2025-0445 State: PUBLISHED Published: 2025-02-04T18:53:06.689Z Last Updated: 2025-02-07T21:26:20.434Z Vendors: Google Products: Chrome Problem Types: CWE-416 Description: Use after free in V8 in Google Chrome prior to 133.0.6943.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/02/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/392521083