9.1
/ 10
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Description
Side-channel information leakage in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)
Basic Information
ID
CVE-2025-10890
Source
Chrome
Published
Sep 24, 2025 at 16:17
Modified
Sep 24, 2025 at 17:08
Affected Product
Vendor
Google
Product
Chrome
Version
140.0.7339.207
Affected Versions
Google Chrome 140.0.7339.207