¡¾·ì϶¹«¸æ¡¿Google Chrome V8ÒýÇæÔ½½ç¶Áд·ì϶(CVE-2025-5419)

°ä²¼¹¦·ò 2025-06-04

Ò»¡¢·ì϶¸ÅÊö


·ì϶Ãû³Æ

Google Chrome V8ÒýÇæÔ½½ç¶Áд·ì϶

CVE   ID

CVE-2025-5419

·ì϶ÀàÐÍ

Ô½½ç¶Áд

·¢ÏÖ¹¦·ò

2025-06-04

·ì϶ÆÀ·Ö

8.8

·ì϶µÈ¼¶

¸ßΣ

¹¥»÷ÏòÁ¿

ÍøÂç

ËùÐèȨÏÞ

²»±ØÒª

ÀûÓÃÄѶÈ

µÍ

Óû§½»»¥

±ØÒª

PoC/EXP

δ¹«¿ª

ÔÚÒ°ÀûÓÃ

ÒÑ·¢ÏÖ


Google Chrome ÊÇÓɹȸ迪·¢µÄ¿çÆ½Ì¨ÍøÒ³ä¯ÀÀÆ÷£¬£¬ÒÔÆäËÙ¶È¡¢°²È«ÐԺͼò½àµÄ½çÃæ¶øÎÅÃû¡£Ëü»ùÓÚ¿ªÔ´µÄChromiumÏîÄ¿£¬£¬Ö§³ÖÏÖ´úÍøÒ³³ß¶È£¬£¬ÓµÓÐ׳´óµÄÀ©´óÐÔ¡£ChromeµÄɳÏä¼¼ÊõÄܹ»ÏÞ¶ÈÍøÒ³ÖеĶñÒâ´úÂ룬£¬¼ÓÇ¿ä¯ÀÀÆ÷µÄ°²È«ÐÔ¡£Ëü»¹ÌṩÁËͬ²½Ö°ÄÜ£¬£¬ÔÊÐíÓû§ÔÚ¶à¸öÉ豸¼äͬ²½ÊéÇ©¡¢º¹Çà¼Í¼µÈÊý¾Ý¡£´ËÍ⣬£¬Chrome¶¨ÆÚ¸üУ¬£¬ÐÞ¸´ÒÑÖª·ì϶²¢¼ÓǿְÄÜ£¬£¬ÊÇÈ«ÇòʹÓÃ×î¿í·ºµÄä¯ÀÀÆ÷Ö®Ò»¡£


2025Äê6ÔÂ4ÈÕ£¬£¬OG¶«·½Ìü¼¯ÍÅVSRC¼à²âµ½Chrome°ä²¼µÄ°²È«²¼¸æ£¬£¬Ö¸³öGoogle Chrome 137.0.7151.68°æ±¾Ö®Ç°´æÔÚV8ÒýÇæµÄÔ½½ç¶Áд·ì϶£¨CVE-2025-5419£©¡£¸Ã·ì϶ԴÓÚV8ÒýÇæÖеÄÔ½½ç¶Áд£¬£¬¹¥»÷Õß¿Éͨ¹ý¶ñÒâÍøÒ³´¥·¢·ì϶£¬£¬ÈƹýɳÏä·À»¤£¬£¬µ¼Ö¶ÑÄÚ´æ°Ü»µ£¬£¬½ø¶ø¿ÉÄÜÒý·¢ä¯ÀÀÆ÷±ÀÀ£¡£¡£¡¢Ãô¸ÐÐÅϢй¶£¬£¬ÉõÖÁʵÏÖÔ¶³Ì´úÂëÖ´ÐУ¨RCE£©£¬£¬ÆëÈ«½ÚÖÆÓû§É豸¡£·ì϶¼¶±ð¸ßΣ£¬£¬·ì϶ÆÀ·Ö8.8·Ö¡£


¶þ¡¢Ó°ÏìÁìÓò


Google Chrome(Windows/Mac) < 137.0.7151.68/.69
Google Chrome(Linux) < 137.0.7151.68


Èý¡¢°²È«´ëÊ©


3.1 Éý¼¶°æ±¾


¹Ù·½ÒѰ䲼ÐÞ¸´°æ±¾£¬£¬½¨ÒéÊÜÓ°ÏìÓû§¾¡¿ì¸üС£


ÏÂÔØÁ´½Ó£ºhttps://www.google.cn/chrome/


3.2 һʱ´ëÊ©


ÔÝÎÞ¡£


3.3 ͨÓý¨Òé


? ¶¨ÆÚ¸üÐÂϵͳ²¹¶¡£¬£¬Ï÷¼õϵͳ·ì϶£¬£¬ÌáÉý·þÎñÆ÷µÄ°²È«ÐÔ¡£
¼ÓǿϵͳºÍÍøÂçµÄ½Ó¼û½ÚÖÆ£¬£¬Åú¸Ä·À»ðǽսÊõ£¬£¬¹Ø±Õ·Ç±ØÒªµÄÀûÓö˿ڻò·þÎñ£¬£¬Ï÷¼õ½«Î£ÏÕ·þÎñ£¨ÈçSSH¡¢RDPµÈ£©Â¶³öµ½¹«Íø£¬£¬Ï÷¼õ¹¥»÷Ãæ¡£
ʹÓÃÆóÒµ¼¶°²È«²úÆ·£¬£¬ÌáÉýÆóÒµµÄÍøÂ簲ȫ»úÄÜ¡£
¼ÓǿϵͳÓû§ºÍȨÏÞÖÎÀí£¬£¬ÆôÓöà³É·ÖÈÏÖ¤»úÖÆºÍ×îСȨÏÞ×¼Ôò£¬£¬Óû§ºÍÈí¼þȨÏÞӦά³ÖÔÚ×îµÍÏÞ¶È¡£

ÆôÓÃÇ¿ÃÜÂëÕ½Êõ²¢ÉèÖÃΪ¶¨ÆÚÅú¸Ä¡£


3.4 ²Î¿¼Á´½Ó


https://chromereleases.googleblog.com/2025/06/stable-channel-update-for-desktop.html