CVE-2025-5068

CVSS 3.1: 8.8 high
EPSS: 3%p88
Published: Jun 3, 2025 · Jun 3, 2025
Modified: Jun 17, 2026

Analyze CVE-2025-5068 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Use after free in Blink in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

Vendors: google

Products: chrome

Weakness: CWE-416

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.5%)

In the news

1 story

Google fixed the second actively exploited Chrome zero

Security AffairsJun 3, 07:58 UTC · Jun 3, 2025Exploit / PoCExploitedCVE-2025-5419 CVE-2025-5068 CVE-2025-27834 · 1 read