VULNERABILITY INTELLIGENCE

CVE-2025-10890

CVSS score9.1 CRITICAL

EPSS probability0.36%

CISA KEVNot currently listed

Published2025-09-24

Last modified2026-09-26

Description

Side-channel information leakage in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)