Home Google CVE-2025-3619
Back to Google

CVE-2025-3619

Google Chrome - Codecs

Google CVSS 8.8 Updated March 12, 2026

Executive Risk Summary

"A critical heap buffer overflow vulnerability exists in Google Chrome's Codecs component on Windows, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page. Successful exploitation could lead to arbitrary code execution, compromising the security of the system."

Operational Audit Arsenal

Target Type Executable
Target Asset chrome.exe
Standard Path %ProgramFiles%GoogleChromeApplication
PowerShell
# 🛠️ Senior Engineer Universal Audit
# Target: chrome.exe (Executable)
$Targets = 'chrome.exe'
$SearchPaths = @("$env:windir\System32", "$env:ProgramFiles", "${env:ProgramFiles(x86)}")

Get-ChildItem -Path $SearchPaths -Include $Targets -Recurse -ErrorAction SilentlyContinue | 
Select-Object FullName, @{Name="Version";Expression={$_.VersionInfo.ProductVersion}}

Patch Impact Forecast

Reboot Required Unlikely

Web browsing services may be affected during the update process

Internal Work Notes

Apply Google Chrome update to version 135.0.7049.95 or later to mitigate critical heap buffer overflow vulnerability in Codecs component

Technical Intelligence & Operational Utilities • Delivered Weekly

Intelligence Sources

Related Google Threats

Data compiled from NVD, MSRC, and CISA KEV Catalog. Intelligence synthesized via AI. Scripts provided for diagnostic purposes under MIT License.