¡¾Îó²îͨ¸æ¡¿Google Chrome V8ÒýÇæÔ½½ç¶ÁдÎó²î(CVE-2025-5419)

Ðû²¼Ê±¼ä 2025-06-04

Ò»¡¢Îó²î¸ÅÊö


Îó²îÃû³Æ

Google Chrome V8ÒýÇæÔ½½ç¶ÁдÎó²î

CVE   ID

CVE-2025-5419

Îó²îÀàÐÍ

Ô½½ç¶Áд

·¢Ã÷ʱ¼ä

2025-06-04

Îó²îÆÀ·Ö

8.8

Îó²îÆ·¼¶

¸ßΣ

¹¥»÷ÏòÁ¿

ÍøÂç

ËùÐèȨÏÞ

²»ÐèÒª

ʹÓÃÄѶÈ

µÍ

Óû§½»»¥

ÐèÒª

PoC/EXP

δ¹ûÕæ

ÔÚҰʹÓÃ

ÒÑ·¢Ã÷


Google Chrome ÊÇÓɹȸ迪·¢µÄ¿çÆ½Ì¨ÍøÒ³ä¯ÀÀÆ÷£¬£¬ÒÔÆäËÙÂÊ¡¢Çå¾²ÐԺ;«Á·µÄ½çÃæ¶øÖøÃû¡£¡£¡£Ëü»ùÓÚ¿ªÔ´µÄChromiumÏîÄ¿£¬£¬Ö§³ÖÏÖ´úÍøÒ³±ê×¼£¬£¬¾ßÓÐǿʢµÄÀ©Õ¹ÐÔ¡£¡£¡£ChromeµÄɳÏäÊÖÒÕ¿ÉÒÔÏÞÖÆÍøÒ³ÖеĶñÒâ´úÂ룬£¬ÔöÇ¿ä¯ÀÀÆ÷µÄÇå¾²ÐÔ¡£¡£¡£Ëü»¹ÌṩÁËͬ²½¹¦Ð§£¬£¬ÔÊÐíÓû§ÔÚ¶à¸ö×°±¸¼äͬ²½ÊéÇ©¡¢ÀúÊ·¼Í¼µÈÊý¾Ý¡£¡£¡£±ðµÄ£¬£¬Chrome°´ÆÚ¸üУ¬£¬ÐÞ¸´ÒÑÖªÎó²î²¢ÔöÇ¿¹¦Ð§£¬£¬ÊÇÈ«ÇòʹÓÃ×îÆÕ±éµÄä¯ÀÀÆ÷Ö®Ò»¡£¡£¡£


2025Äê6ÔÂ4ÈÕ£¬£¬bevictorΰµÂ¼¯ÍÅVSRC¼à²âµ½ChromeÐû²¼µÄÇ徲ͨ¸æ£¬£¬Ö¸³öGoogle Chrome 137.0.7151.68°æ±¾Ö®Ç°±£´æV8ÒýÇæµÄÔ½½ç¶ÁдÎó²î£¨CVE-2025-5419£©¡£¡£¡£¸ÃÎó²îÔ´ÓÚV8ÒýÇæÖеÄÔ½½ç¶Áд£¬£¬¹¥»÷Õß¿Éͨ¹ý¶ñÒâÍøÒ³´¥·¢Îó²î£¬£¬ÈƹýɳÏä·À»¤£¬£¬µ¼Ö¶ÑÄÚ´æË𻵣¬£¬½ø¶ø¿ÉÄÜÒý·¢ä¯ÀÀÆ÷Í߽⡢Ãô¸ÐÐÅϢй¶£¬£¬ÉõÖÁʵÏÖÔ¶³Ì´úÂëÖ´ÐУ¨RCE£©£¬£¬ÍêÈ«¿ØÖÆÓû§×°±¸¡£¡£¡£Îó²î¼¶±ð¸ßΣ£¬£¬Îó²îÆÀ·Ö8.8·Ö¡£¡£¡£


¶þ¡¢Ó°Ïì¹æÄ£


Google Chrome(Windows/Mac) < 137.0.7151.68/.69
Google Chrome(Linux) < 137.0.7151.68


Èý¡¢Çå¾²²½·¥


3.1 Éý¼¶°æ±¾


¹Ù·½ÒÑÐû²¼ÐÞ¸´°æ±¾£¬£¬½¨ÒéÊÜÓ°ÏìÓû§¾¡¿ì¸üС£¡£¡£


ÏÂÔØÁ´½Ó£ºhttps://www.google.cn/chrome/


3.2 ÔÝʱ²½·¥


ÔÝÎÞ¡£¡£¡£


3.3 ͨÓý¨Òé


? °´ÆÚ¸üÐÂϵͳ²¹¶¡£¬£¬ïÔ̭ϵͳÎó²î£¬£¬ÌáÉýЧÀÍÆ÷µÄÇå¾²ÐÔ¡£¡£¡£
ÔöǿϵͳºÍÍøÂçµÄ»á¼û¿ØÖÆ£¬£¬Ð޸ķÀ»ðǽսÂÔ£¬£¬¹Ø±Õ·ÇÐëÒªµÄÓ¦Óö˿ڻòЧÀÍ£¬£¬ïÔÌ­½«Î£ÏÕЧÀÍ£¨ÈçSSH¡¢RDPµÈ£©Ì»Â¶µ½¹«Íø£¬£¬ïÔÌ­¹¥»÷Ãæ¡£¡£¡£
ʹÓÃÆóÒµ¼¶Çå¾²²úÆ·£¬£¬ÌáÉýÆóÒµµÄÍøÂçÇå¾²ÐÔÄÜ¡£¡£¡£
ÔöǿϵͳÓû§ºÍȨÏÞÖÎÀí£¬£¬ÆôÓöàÒòËØÈÏÖ¤»úÖÆºÍ×îСȨÏÞÔ­Ôò£¬£¬Óû§ºÍÈí¼þȨÏÞÓ¦¼á³ÖÔÚ×îµÍÏÞ¶È¡£¡£¡£

ÆôÓÃÇ¿ÃÜÂëÕ½ÂÔ²¢ÉèÖÃΪ°´ÆÚÐ޸ġ£¡£¡£


3.4 ²Î¿¼Á´½Ó


https://chromereleases.googleblog.com/2025/06/stable-channel-update-for-desktop.html