CVE-2025-0995
published 2025-02-15CVE-2025-0995: Use after free in V8 in Google Chrome prior to 133.0.6943.98 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page…
PriorityP347high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
EPSS
0.44%
35.5th percentile
Use after free in V8 in Google Chrome prior to 133.0.6943.98 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| chromium | chromium | >= 0 < 133.0.6943.98-1~deb12u1 | 133.0.6943.98-1~deb12u1 |
| chromium | chromium | >= 0 < 133.0.6943.98-1 | 133.0.6943.98-1 |
| chromium | chromium | >= 0 < 133.0.6943.98-1 | 133.0.6943.98-1 |
| debian | chromium | < chromium 133.0.6943.98-1~deb12u1 (bookworm) | chromium 133.0.6943.98-1~deb12u1 (bookworm) |
| chrome | < 133.0.69943.98 | 133.0.69943.98 | |
| chrome | >= 133.0.6943.98 < 133.0.6943.98 | 133.0.6943.98 | |
| chrome_chrome | — | — | |
| msrc | cbl2_kernel_5.15.32.1-3_on_cbl_mariner_2.0 | — | — |
| msrc | cm1_kernel_5.10.111.1-1_on_cbl_mariner_1.0 | — | — |
| msrc | microsoft_edge | — | — |
| paloalto | prisma_browser | — | — |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
osv8.8HIGH
vendor_debian8.8HIGH
vendor_msrc8.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Palo Alto
PAN-SA-2025-0007 Chromium: Monthly Vulnerability Update (March 2025)
vendor_paloalto·2025-03-12·CVSS 8.8
[HIGH] PAN-SA-2025-0007 Chromium: Monthly Vulnerability Update (March 2025)
PAN-SA-2025-0007 Chromium: Monthly Vulnerability Update (March 2025)
Palo Alto Networks incorporated the following Chromium security fixes into our products: https://chromereleases.googleblog.com/2025/03/stable-channel-update-for-desktop.html https://chromereleases.googleblog.com/2025/02/stable-channel-update-for-desktop_25.html https://chromereleases.googleblog.com/2025/02/stable-channel-update-for-desktop_18.html https://chromereleases.googleblog.com/2025/02/stable-channel-update-for-desktop_12.html CVE Summary CVE-2025-0995 Use after free in V8 CVE-2025-0996 Inappropriate implementation in Browser UI CVE-2025-0997 Use after free in Navigation CVE-2025-0998 Out of bounds memory access in V8 CVE-2025-0999 Heap buffer overflow in V8 CVE-2025-1006 Use after free in Network CVE-2025-1426 He
Chrome
Stable Channel Update for ChromeOS / ChromeOS Flex - M133: CVE-2025-0995
vendor_chrome·2025-02-21·CVSS 8.8
CVE-2025-0995 [HIGH] Stable Channel Update for ChromeOS / ChromeOS Flex - M133: CVE-2025-0995
Stable Channel Update for ChromeOS / ChromeOS Flex - M133
CVE-2025-0995
Microsoft
Chromium: CVE -2025-0995 Use after free in V8
vendor_msrc·2025-02-11·CVSS 8.8
CVE-2025-0995 [HIGH] Chromium: CVE -2025-0995 Use after free in V8
Chromium: CVE -2025-0995 Use after free in V8
Description: This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
FAQ: Why is this Chrome CVE included in the Security Update Guide?
The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.
How can I see the version of the browser?
In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window
Click on Help and Feedback
Click on About Microsoft Edge
FAQ: What is
Debian
CVE-2025-0995: chromium - Use after free in V8 in Google Chrome prior to 133.0.6943.98 allowed a remote at...
vendor_debian·2025·CVSS 8.8
CVE-2025-0995 [HIGH] CVE-2025-0995: chromium - Use after free in V8 in Google Chrome prior to 133.0.6943.98 allowed a remote at...
Use after free in V8 in Google Chrome prior to 133.0.6943.98 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Scope: local
bookworm: resolved (fixed in 133.0.6943.98-1~deb12u1)
bullseye: open
forky: resolved (fixed in 133.0.6943.98-1)
sid: resolved (fixed in 133.0.6943.98-1)
trixie: resolved (fixed in 133.0.6943.98-1)
Microsoft
An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state potentially allowing a local user t
vendor_msrc·2022-03-08·CVSS 7.8
CVE-2022-0995 [HIGH] CWE-787 An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state potentially allowing a local user t
An out-of-bounds (OOB) memory write flaw was found in the Linux kernel’s watch_queue event notification subsystem. This flaw can overwrite parts of the kernel state potentially allowing a local user to gain privileged access or cause a denial of service on the system.
FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information
OSV
linux-aws-5.15 vulnerabilities
osv·2025-04-29·CVSS 7.8
CVE-2022-0995 linux-aws-5.15 vulnerabilities
linux-aws-5.15 vulnerabilities
Jann Horn discovered that the watch_queue event notification subsystem in
the Linux kernel contained an out-of-bounds write vulnerability. A local
attacker could use this to cause a denial of service (system crash) or
escalate their privileges. (CVE-2022-0995)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- iSCSI Boot Firmware Table Attributes driver;
- Network drivers;
- File systems infrastructure;
- NTFS3 file system;
- Ethernet bridge;
- Ethtool driver;
- IPv6 networking;
- Network traffic control;
- VMware vSockets driver;
(CVE-2024-26837, CVE-2025-21993, CVE-2025-21702, CVE-2024-50248,
CVE-2024-46826, CVE-2024-50256, CV
OSV
linux-oracle-5.15 vulnerabilities
osv·2025-04-25·CVSS 7.8
CVE-2022-0995 linux-oracle-5.15 vulnerabilities
linux-oracle-5.15 vulnerabilities
Jann Horn discovered that the watch_queue event notification subsystem in
the Linux kernel contained an out-of-bounds write vulnerability. A local
attacker could use this to cause a denial of service (system crash) or
escalate their privileges. (CVE-2022-0995)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Network drivers;
- File systems infrastructure;
- NTFS3 file system;
- Ethernet bridge;
- Ethtool driver;
- IPv6 networking;
- Network traffic control;
- VMware vSockets driver;
(CVE-2025-21993, CVE-2025-21703, CVE-2024-50248, CVE-2025-21700,
CVE-2024-50256, CVE-2025-21701, CVE-2024-56651, CVE-2025-21756,
CVE-2024-26837
OSV
linux-intel-iot-realtime, linux-realtime vulnerabilities
osv·2025-04-24·CVSS 7.8
CVE-2022-0995 linux-intel-iot-realtime, linux-realtime vulnerabilities
linux-intel-iot-realtime, linux-realtime vulnerabilities
Jann Horn discovered that the watch_queue event notification subsystem in
the Linux kernel contained an out-of-bounds write vulnerability. A local
attacker could use this to cause a denial of service (system crash) or
escalate their privileges. (CVE-2022-0995)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Network drivers;
- File systems infrastructure;
- NTFS3 file system;
- Ethernet bridge;
- Ethtool driver;
- IPv6 networking;
- Network traffic control;
- VMware vSockets driver;
(CVE-2024-56651, CVE-2025-21756, CVE-2024-26837, CVE-2025-21700,
CVE-2024-46826, CVE-2024-50256, CVE-2024-50248, CVE-202
OSV
linux-aws-fips, linux-fips, linux-gcp-fips vulnerabilities
osv·2025-04-24·CVSS 7.8
CVE-2022-0995 linux-aws-fips, linux-fips, linux-gcp-fips vulnerabilities
linux-aws-fips, linux-fips, linux-gcp-fips vulnerabilities
Jann Horn discovered that the watch_queue event notification subsystem in
the Linux kernel contained an out-of-bounds write vulnerability. A local
attacker could use this to cause a denial of service (system crash) or
escalate their privileges. (CVE-2022-0995)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Network drivers;
- File systems infrastructure;
- NTFS3 file system;
- Ethernet bridge;
- Ethtool driver;
- IPv6 networking;
- Network traffic control;
- VMware vSockets driver;
(CVE-2024-26837, CVE-2025-21993, CVE-2025-21702, CVE-2025-21700,
CVE-2025-21701, CVE-2024-50248, CVE-2024-56651, CVE-2
OSV
linux-azure-fips vulnerabilities
osv·2025-04-24·CVSS 7.8
CVE-2022-0995 linux-azure-fips vulnerabilities
linux-azure-fips vulnerabilities
Jann Horn discovered that the watch_queue event notification subsystem in
the Linux kernel contained an out-of-bounds write vulnerability. A local
attacker could use this to cause a denial of service (system crash) or
escalate their privileges. (CVE-2022-0995)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- File systems infrastructure;
- NTFS3 file system;
- Ethernet bridge;
- Ethtool driver;
- IPv6 networking;
- Network traffic control;
- VMware vSockets driver;
(CVE-2024-26837, CVE-2024-50248, CVE-2025-21756, CVE-2025-21701,
CVE-2024-50256, CVE-2025-21993
GHSA
GHSA-377p-4737-hx6m: Use after free in V8 in Google Chrome prior to 133
ghsa_unreviewed·2025-02-15
CVE-2025-0995 [MEDIUM] CWE-416 GHSA-377p-4737-hx6m: Use after free in V8 in Google Chrome prior to 133
Use after free in V8 in Google Chrome prior to 133.0.6943.98 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
OSV
CVE-2025-0995: Use after free in V8 in Google Chrome prior to 133
osv·2025-02-15·CVSS 8.8
CVE-2025-0995 [HIGH] CVE-2025-0995: Use after free in V8 in Google Chrome prior to 133
Use after free in V8 in Google Chrome prior to 133.0.6943.98 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2025-02-15
Published