CVE-2019-5825: Google Chromium V8 Out-of-Bounds Write Vulnerability
Summary: CVE-2019-5825 is an out-of-bounds write vulnerability in the Google Chromium V8 engine that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. The flaw could affect multiple browsers built on Chromium, including Google Chrome, Microsoft Edge, and Opera, and CISA set a remediation due date of 2022-06-22.
What you should know: A single crafted HTML page is the entire attack surface here, and because the flaw sits in the shared V8 engine, patching Chrome alone may leave Edge and Opera users exposed; CISA's known ransomware campaign use for this CVE is listed as unknown.
Read the original at CISA KEV Catalog ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2019-5825Google
- Related
- CVE-2026-125350: Google Chromium Use-After-Free Vulnerability Known Exploited Vulnerabilities · Nov 10, 2026CVE-2026-111497: Google Brotli Unchecked Return Value Vulnerability Known Exploited Vulnerabilities · Oct 27, 2026CVE-2026-58704: Google Pixel Improper Authorization Vulnerability Known Exploited Vulnerabilities · Sep 16, 2026