¡¾·ì϶¹«¸æ¡¿Google Chrome V8 ÀàÐÍ»ìºÏ·ì϶(CVE-2025-8010)

°ä²¼¹¦·ò 2025-07-23

Ò»¡¢¡¢·ì϶¸ÅÊö


·ì϶Ãû³Æ

Google Chrome V8 ÀàÐÍ»ìºÏ·ì϶

CVE   ID

CVE-2025-8010

·ì϶ÀàÐÍ

ÀàÐÍ»ìºÏ

·¢ÏÖ¹¦·ò

2025-07-23

·ì϶ÆÀ·Ö

8.8

·ì϶µÈ¼¶

¸ßΣ

¹¥»÷ÏòÁ¿

ÍøÂç

ËùÐèȨÏÞ

ÎÞ

ÀûÓÃÄѶÈ

µÍ

Óû§½»»¥

±ØÒª

PoC/EXP

δ¹«¿ª

ÔÚÒ°ÀûÓÃ

δ·¢ÏÖ


Google Chrome ÊÇÓɹȸ迪·¢µÄ¿çƽ̨ÍøÒ³ä¯ÀÀÆ÷£¬£¬ÒÔÆäËٶȡ¢¡¢°²È«ÐԺͼò½àµÄ½çÃæ¶øÎÅÃû¡£¡£Ëü»ùÓÚ¿ªÔ´µÄChromiumÏîÄ¿£¬£¬Ö§³ÖÏÖ´úÍøÒ³³ß¶È£¬£¬ÓµÓÐ׳´óµÄÀ©´óÐÔ¡£¡£ChromeµÄɳÏä¼¼ÊõÄܹ»ÏÞ¶ÈÍøÒ³ÖеĶñÒâ´úÂ룬£¬¼ÓÇ¿ä¯ÀÀÆ÷µÄ°²È«ÐÔ¡£¡£Ëü»¹ÌṩÁËͬ²½Ö°ÄÜ£¬£¬ÔÊÐíÓû§ÔÚ¶à¸öÉ豸¼äͬ²½ÊéÇ©¡¢¡¢º¹Çà¼Í¼µÈÊý¾Ý¡£¡£´ËÍ⣬£¬Chrome¶¨ÆÚ¸üУ¬£¬ÐÞ¸´ÒÑÖª·ì϶²¢¼ÓÇ¿Ö°ÄÜ£¬£¬ÊÇÈ«ÇòʹÓÃ×î¿í·ºµÄä¯ÀÀÆ÷Ö®Ò»¡£¡£


2025Äê7ÔÂ23ÈÕ£¬£¬OG¶«·½Ìü¼¯ÍÅVSRC¼à²âµ½Google ChromeÖдæÔÚÁ½¸ö¸ßΣ·ì϶£ºGoogle Chrome V8 ÀàÐÍ»ìºÏ·ì϶£¨CVE-2025-8010£©ºÍ£¨CVE-2025-8011£©¡£¡£¸ÃÀà·ì϶ԴÓÚV8ÒýÇæÔÚÔËÐÐʱ¶Ô¶ÔÏóÀàÐÍÅжϲ»ÑÏ£¬£¬¹¥»÷Õß¿Éͨ¹ý»ú¹ØÌض¨ÊäÈ룬£¬ÓÕʹ·¨Ê½½«¶ÔÏóÎó¼ø±ðΪÃýÎóÀàÐÍ£¬£¬´Ó¶øʵÏÖÄÚ´æÔ½½ç½Ó¼û»òËÁÒâ´úÂëÖ´ÐС£¡£ÔÚä¯ÀÀÆ÷»·¾³Ï£¬£¬¹¥»÷Õß¿ÉÀûÓø÷ì϶ÓÕµ¼Óû§½Ó¼û¶ñÒâÍøÒ³£¬£¬´¥·¢¶ñÒâJavaScript´úÂ룬£¬½ø¶ø¿ÉÄÜÈƹýä¯ÀÀÆ÷ɳÏäÏ޶ȣ¬£¬ÊµÏÖÊý¾ÝÇÔÈ¡¡¢¡¢È¨ÏÞÌáÉý»ò¶ÔϵͳµÄ½øÒ»²½½ÚÖÆ£¬£¬·ì϶µÈ¼¶¸ßΣ¡£¡£¡£


¶þ¡¢¡¢Ó°ÏìÁìÓò


Google Chrome (Windows/Mac) < 138.0.7204.168/.169
Google Chrome (Linux) < 138.0.7204.168


Èý¡¢¡¢°²È«´ëÊ©


3.1 Éý¼¶°æ±¾


¹Ù·½ÒÑ°ä²¼ÐÞ¸´°æ±¾£¬£¬½¨Ò龡¿ìÉý¼¶ÖÁ×îа汾
Google Chrome (Windows/Mac) >= 138.0.7204.168/.169
Google Chrome (Linux) >= 138.0.7204.168


3.2 һʱ´ëÊ©


ÔÝÎÞ¡£¡£


3.3 ͨÓý¨Òé


?¶¨ÆÚ¸üÐÂϵͳ²¹¶¡£¬£¬Ï÷¼õϵͳ·ì϶£¬£¬ÌáÉý·þÎñÆ÷µÄ°²È«ÐÔ¡£¡£
?¼ÓǿϵͳºÍÍøÂçµÄ½Ó¼û½ÚÖÆ£¬£¬Åú¸Ä·À»ðǽսÊõ£¬£¬¹Ø±Õ·Ç±ØÒªµÄÀûÓö˿ڻò·þÎñ£¬£¬Ï÷¼õ½«Î£ÏÕ·þÎñ£¨ÈçSSH¡¢¡¢RDPµÈ£©Â¶³öµ½¹«Íø£¬£¬Ï÷¼õ¹¥»÷Ãæ¡£¡£
?ʹÓÃÆóÒµ¼¶°²È«²úÆ·£¬£¬ÌáÉýÆóÒµµÄÍøÂ簲ȫ»úÄÜ¡£¡£
?¼ÓǿϵͳÓû§ºÍȨÏÞÖÎÀí£¬£¬ÆôÓöà³É·ÖÈÏÖ¤»úÖƺÍ×îСȨÏÞ×¼Ôò£¬£¬Óû§ºÍÈí¼þȨÏÞӦά³ÖÔÚ×îµÍÏ޶ȡ£¡£
?ÆôÓÃÇ¿ÃÜÂëÕ½Êõ²¢ÉèÖÃΪ¶¨ÆÚÅú¸Ä¡£¡£


3.4 ²Î¿¼Á´½Ó


https://chromereleases.googleblog.com/2025/07/stable-channel-update-for-desktop_22.html