CVE-2025-11756CWE-416

CVE-2025-11756

High · published November 7, 2025

CVSS v3.1
8.8
EPSS
0%
Percentile
34.6
In the wild
Unconfirmed
What it is

🚨 A clever attack could exploit a use after free vulnerability in Google Chrome, allowing remote attackers to meddle with your memory! ⚡ Think of it like a sneaky visitor who knows how to manipulate the building plans of your house—by accessing and changing parts of your structure that should be off-limits. With clever architecture, they could cause significant damage without you even knowing until it's too late. An attacker who has compromised the renderer process could perform out-of-bounds memory access, leading to data leaks or even system crashes. This means they could potentially gain access to sensitive information or disrupt your browsing experience entirely—definitely not the kind of surprise you want!

Put simply

Think of it like a sneaky visitor who knows how to manipulate the building plans of your house—by accessing and changing parts of your structure that should be off-limits. With clever architecture, they could cause significant damage without you even knowing until it's too late. This vulnerability arises from a use after free flaw in the Safe Browsing feature of Google Chrome prior to version 141.0.7390.107, allowing remote attackers to manipulate memory in a way that could lead to unauthorized access.

What to do

An attacker who has compromised the renderer process could perform out-of-bounds memory access, leading to data leaks or even system crashes. This means they could potentially gain access to sensitive information or disrupt your browsing experience entirely—definitely not the kind of surprise you want! Immediate action is required! Update Google Chrome to version 141.0.7390.107 or later to patch this vulnerability. Regularly check for updates to ensure you're always running the latest and most secure version. 🛡️ You've got this! Stay vigilant and update your browser to keep those pesky attackers at bay! 💪✨

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00414 · 34.6th percentile
Weakness
CWE-416 · Use After Free
Published
2025-11-07T04:15Z
Affected products (1)
ProductVersionsFixed in
google/chrome< 141.0.7390.107141.0.7390.107
References (2)
EPSS history
Timeline
  • 06 NOV 22:26Z
    Use after free in Safe Browsing in Google Chrome prior to 141.0.7390.107 allowed a remote attacker who had compromised the renderer process to potentially…
    cvelistv5