Exploit Total
ExploreInsightsHow it worksContact us
bySign in

© 2026 Anyday Security

FAQPrivacy PolicyTerms of Use

Product names, logos and brands are property of their respective owners. They are used here for identification only and imply no affiliation or endorsement.

ExploreInsightsHow it worksContact us
Back
Vulnerability ID

CVE-2025-6191

Potentially perform out of bounds memory access via integer overflow in V8

ProductChrome
CVSS 3.1High8.8
EPSS11.59%
Has public PoCYes
AI Exploitability

No working AI exploit yet

Working AI PoC
Not yet
Cheapest run
$12.67
Fastest run
1.5 hr
Model MatrixCapability BreakdownVulnerability DetailsTimelineCommunity
Sign in
Model MatrixCapability BreakdownVulnerability DetailsTimelineCommunity

Overview

View on NVD

Integer overflow in V8 in Google Chrome prior to 137.0.7151.119 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

CWE
CWE-190
Weakness
Integer Overflow or Wraparound
Component
V8
Impact
Potentially perform out of bounds memory access
Published
2025-06-18
Fixed version
137.0.7151.119

Risk factors

In-the-WildNot observed
CISA KEVNot listed
Public ExploitAvailable
Ransomware useNone known

Severity

CVSS 3.1Only version published

8.8High

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability
Attack VectorNetwork
ComplexityLow
Privileges RequiredNone
User InteractionRequired
Impact
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh

EPSS

Chance of exploitation in the next 30 days

11.59%

SSVC

Stakeholder-specific vulnerability categorization

Not scored. CISA publishes an SSVC decision for a subset of CVEs.