What the vulnerability does

01Description

Off by one error in V8 in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)

Key dates

02Disclosure timeline

November 6, 2025 CVE published
November 7, 2025 Record updated