CVE-2025-27038KEV · OVERDUECWE-416

Use After Free in Graphics

High · published June 3, 2025

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 7.5. It is confirmed in active exploitation. It sits in the 63.0th percentile for exploit probability.

488
days past CISA
deadline
CVSS v3.1
7.5
EPSS
1%
Percentile
63.0
In the wild
Confirmed
What it is

⚡ Memory corruption in Chrome's Adreno GPU drivers could let attackers execute code on your device — imagine a rogue artist taking over your painting! 🎨 Think of it like a sneaky art thief who slips a painting over a canvas, altering its beauty without anyone realizing it. This vulnerability allows attackers to blend malicious code into legitimate graphics rendering, potentially hijacking your system without a trace. An attacker could exploit this vulnerability to execute arbitrary code, leading to unauthorized access and control over your device. This could result in everything from data theft to malicious software installations, making it a seriously high-risk scenario. Time to act before the paint dries!

Put simply

Think of it like a sneaky art thief who slips a painting over a canvas, altering its beauty without anyone realizing it. This vulnerability allows attackers to blend malicious code into legitimate graphics rendering, potentially hijacking your system without a trace. CVE-2025-27038 arises from memory corruption issues in the Adreno GPU drivers used in Chrome, allowing an attacker to manipulate memory and execute arbitrary code during graphics rendering.

What to do

An attacker could exploit this vulnerability to execute arbitrary code, leading to unauthorized access and control over your device. This could result in everything from data theft to malicious software installations, making it a seriously high-risk scenario. Time to act before the paint dries! Update Chrome to the latest version immediately, as the vulnerability is known to be exploited in the wild. Regularly check for driver updates for your GPU to ensure you have the latest security patches. Don’t delay — protect your device! You've got this! Follow these steps, and you’ll have your defenses up in no time. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01016 · 63.0th percentile
Weakness
CWE-416 · Use After Free
Published
2025-06-03T05:53Z
KEV added
2025-06-03 · due 2025-06-24
EPSS history
Timeline
  • 03 JUN 05:53Z
    Use After Free in Graphics
    cvelistv5
  • 03 JUN 00:00Z
    Added to CISA KEV — remediate by Jun 24
    kev