- 88/2025
- High
Google has released an updated Chrome version “135.0.7049.95/.96” for Windows, Mac, and “135.0.7049.95” for Linux.
The addressed vulnerabilities could allow the remote attacker to execute arbitrary code via a crafted HTML page and gain access to the affected system.
Sample of the addressed vulnerabilities:
Google Chrome Heap Buffer Overflow in Codecs Vulnerability (CVE-2025-3619):
- CVSS: 8.8
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: Required
- Consequences: Gain Access
Vulnerabilities
- CVE-2025-3619
- CVE-2025-3620
Mitigations
The enterprise should deploy this patch as soon as the testing phase is completed.