CVE-2025-1916
Use after free in Profiles in Google Chrome prior to 134.0.6998.35 allowed an attacker who...
Use after free in Profiles in Google Chrome prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Use after free in Profiles in Google Chrome prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
- Record
CVE-2025-1916- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-416
- Updated
- 2026-11-02
EUVDEUVD-2025-6093
Use after free in Profiles in Google Chrome prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
- Record
EUVD-2025-6093- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-7qw8-w379-55hx
Use after free in Profiles in Google Chrome prior to 134.0.6998.35 allowed an attacker who...
Use after free in Profiles in Google Chrome prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
- Record
GHSA-7qw8-w379-55hx- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-416
- Updated
- 2026-11-02
NVD
Use after free in Profiles in Google Chrome prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
- Record
CVE-2025-1916- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-416
- Updated
- 2026-11-02
OSV
Use after free in Profiles in Google Chrome prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
- Record
CVE-2025-1916- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2025-1916
Use after free in Profiles in Google Chrome prior to 134.0.6998.35 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
- Record
DEBIAN-CVE-2025-1916- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVMGASA-2025-0091 No score
Updated chromium-browser-stable packages fix security vulnerabilities
High CVE-2025-1914: Out of bounds read in V8. Medium CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools. Medium CVE-2025-1916: Use after free in Profiles. Medium CVE-2025-1917: Inappropriate Implementation in Browser UI. Medium CVE-2025-1918: Out of bounds read in PDFium. Medium CVE-2025-1919: Out of bounds read in Media. Medium CVE-2025-1921: Inappropriate Implementation in Media Low CVE-2025-1922: Inappropriate Implementation in Selection. Low CVE-2025-1923: Inappropriate Implementation in Permission Prompts. And more, please see the references.
- Record
MGASA-2025-0091- Updated
- 2026-11-02
OSVopenSUSE-SU-2025:0084-1 No score
Security update for chromium
Chromium was updated to 134.0.6998.35 (stable release 2025-03-04) (boo#1238575):
- CVE-2025-1914: Out of bounds read in V8
- CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools
- CVE-2025-1916: Use after free in Profiles
- CVE-2025-1917: Inappropriate Implementation in Browser UI
- CVE-2025-1918: Out of bounds read in PDFium
- CVE-2025-1919: Out of bounds read in Media
- CVE-2025-1921: Inappropriate Implementation in Media Stream
- CVE-2025-1922: Inappropriate Implementation in Selection
- CVE-2025-1923: Inappropriate Implementation in Permission Prompts
- Record
openSUSE-SU-2025:0084-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2025:14854-1 No score
chromedriver-134.0.6998.35-1.1 on GA media
These are all security issues fixed in the chromedriver-134.0.6998.35-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2025:14854-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
chromiumDebian:12 |
before 134.0.6998.35-1~deb12u1, plus listed versions 113.0.5672.126-1114.0.5735.106-1114.0.5735.106-1~deb11u1114.0.5735.106-1~deb12u1114.0.5735.133-1 Show 45 moreShow less114.0.5735.133-1~deb11u1114.0.5735.133-1~deb12u1114.0.5735.198-1114.0.5735.198-1~deb11u1114.0.5735.198-1~deb12u1114.0.5735.90-1114.0.5735.90-2114.0.5735.90-2~deb11u1114.0.5735.90-2~deb12u1115.0.5790.102-1115.0.5790.102-2115.0.5790.170-1115.0.5790.170-1~deb11u1115.0.5790.170-1~deb12u1115.0.5790.98-1115.0.5790.98-1~deb11u1115.0.5790.98-1~deb12u1115.0.5790.98-2116.0.5845.110-1116.0.5845.110-1~deb11u1116.0.5845.110-1~deb12u1116.0.5845.110-2116.0.5845.140-1116.0.5845.140-1~deb11u1116.0.5845.140-1~deb12u1116.0.5845.180-1116.0.5845.180-1~deb11u1116.0.5845.180-1~deb12u1116.0.5845.96-1116.0.5845.96-1~deb11u1116.0.5845.96-1~deb12u1116.0.5845.96-2117.0.5938.132-1117.0.5938.132-1~deb11u1117.0.5938.132-1~deb12u1117.0.5938.132-2117.0.5938.149-1117.0.5938.149-1~deb11u1117.0.5938.149-1~deb12u1117.0.5938.62-1117.0.5938.62-1~deb11u1117.0.5938.62-1~deb12u1117.0.5938.92-1118.0.5993.117-1118.0.5993.117-1~deb11u1 |
134.0.6998.35-1~deb12u1 |
chromiumDebian:13 |
before 134.0.6998.35-1 | 134.0.6998.35-1 |
chromiumDebian:14 |
before 134.0.6998.35-1 | 134.0.6998.35-1 |
chromiumDebian:12 From an advisory covering 10 CVEs |
before 134.0.6998.35-1~deb12u1, plus listed versions 113.0.5672.126-1114.0.5735.106-1114.0.5735.106-1~deb11u1114.0.5735.106-1~deb12u1114.0.5735.133-1 Show 45 moreShow less114.0.5735.133-1~deb11u1114.0.5735.133-1~deb12u1114.0.5735.198-1114.0.5735.198-1~deb11u1114.0.5735.198-1~deb12u1114.0.5735.90-1114.0.5735.90-2114.0.5735.90-2~deb11u1114.0.5735.90-2~deb12u1115.0.5790.102-1115.0.5790.102-2115.0.5790.170-1115.0.5790.170-1~deb11u1115.0.5790.170-1~deb12u1115.0.5790.98-1115.0.5790.98-1~deb11u1115.0.5790.98-1~deb12u1115.0.5790.98-2116.0.5845.110-1116.0.5845.110-1~deb11u1116.0.5845.110-1~deb12u1116.0.5845.110-2116.0.5845.140-1116.0.5845.140-1~deb11u1116.0.5845.140-1~deb12u1116.0.5845.180-1116.0.5845.180-1~deb11u1116.0.5845.180-1~deb12u1116.0.5845.96-1116.0.5845.96-1~deb11u1116.0.5845.96-1~deb12u1116.0.5845.96-2117.0.5938.132-1117.0.5938.132-1~deb11u1117.0.5938.132-1~deb12u1117.0.5938.132-2117.0.5938.149-1117.0.5938.149-1~deb11u1117.0.5938.149-1~deb12u1117.0.5938.62-1117.0.5938.62-1~deb11u1117.0.5938.62-1~deb12u1117.0.5938.92-1118.0.5993.117-1118.0.5993.117-1~deb11u1 |
134.0.6998.35-1~deb12u1 |
chromium-browser-stableMageia:9 From an advisory covering 19 CVEs |
before 134.0.6998.35-1.mga9.tainted | 134.0.6998.35-1.mga9.tainted |
chromiumSUSE:Package Hub 15 SP6 From an advisory covering 9 CVEs |
before 134.0.6998.35-bp156.2.90.1 | 134.0.6998.35-bp156.2.90.1 |
chromiumopenSUSE:Leap 15.6 From an advisory covering 9 CVEs |
before 134.0.6998.35-bp156.2.90.1 | 134.0.6998.35-bp156.2.90.1 |
chromiumopenSUSE:Tumbleweed From an advisory covering 9 CVEs |
before 134.0.6998.35-1.1 | 134.0.6998.35-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-1916 is a high vulnerability (CVSS 8.8) in Google Chrome, published March 5, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.28%, the 20th percentile. Fixed in chromium 134.0.6998.35-1~deb12u1.
References
chromereleases.googleblog.com/2025/03/stable-channel-update-for-desktop.html
issues.chromium.org/issues/376493203
nvd.nist.gov/vuln/detail/CVE-2025-1916
github.com/advisories/GHSA-7qw8-w379-55hx
security-tracker.debian.org/tracker/CVE-2025-1916
advisories.mageia.org/MGASA-2025-0091.html
Show 17 moreShow less
bugs.mageia.org/show_bug.cgi?id=34012
lists.opensuse.org/archives/list/[email protected]/thread/RXNDPKOASMYM2SMWNDENDFTKUIT4CM4A
bugzilla.suse.com/1238575
suse.com/security/cve/CVE-2025-1914
Left out here: 288 versions. The JSON record has them.