p PatchFirst

CVE-2025-8882

CVE-2025-8882

CVSS 8.8 · High · EPSS 0.3% · Fix available

Are you affected?

  • chromeNo fix published
  • chromium Debian 12Update to 139.0.7258.127-1~deb12u1
  • chromium Debian 13Update to 139.0.7258.127-1~deb13u1
  • chromium Debian 14Update to 139.0.7258.127-1

Check the installed version:

dpkg-query -W -f='${source:Package} ${binary:Package} ${Version}\n' | awk '$1=="chromium"'

The free check shows your server's rating and highlights whether chrome and the rest of its software need attention. No sign-up; server names and IP addresses are never sent. CVE IDs, fixed versions and recommendations come with paid monitoring.

curl -fsSL https://patchfirst.dev/check.sh | sh
Check your server for free →

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

Use after free in Aura in Google Chrome prior to 139.0.7258.127 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

Published
Updated

Stack: system

Affected products and versions

  • chrome

    Versions
    • ≥ 139.0.7258.127, < 139.0.7258.127: Affected (custom)

    No fix published

  • chromium Debian 12

    Versions
    • 113.0.5672.126-1
    • 114.0.5735.106-1
    • 114.0.5735.106-1~deb11u1
    • 114.0.5735.106-1~deb12u1
    • 114.0.5735.133-1
    • 114.0.5735.133-1~deb11u1
    All versions (187)
    • 114.0.5735.133-1~deb12u1
    • 114.0.5735.198-1
    • 114.0.5735.198-1~deb11u1
    • 114.0.5735.198-1~deb12u1
    • 114.0.5735.90-1
    • 114.0.5735.90-2
    • 114.0.5735.90-2~deb11u1
    • 114.0.5735.90-2~deb12u1
    • 115.0.5790.102-1
    • 115.0.5790.102-2
    • 115.0.5790.170-1
    • 115.0.5790.170-1~deb11u1
    • 115.0.5790.170-1~deb12u1
    • 115.0.5790.98-1
    • 115.0.5790.98-1~deb11u1
    • 115.0.5790.98-1~deb12u1
    • 115.0.5790.98-2
    • 116.0.5845.110-1
    • 116.0.5845.110-1~deb11u1
    • 116.0.5845.110-1~deb12u1
    • 116.0.5845.110-2
    • 116.0.5845.140-1
    • 116.0.5845.140-1~deb11u1
    • 116.0.5845.140-1~deb12u1
    • 116.0.5845.180-1
    • 116.0.5845.180-1~deb11u1
    • 116.0.5845.180-1~deb12u1
    • 116.0.5845.96-1
    • 116.0.5845.96-1~deb11u1
    • 116.0.5845.96-1~deb12u1
    • 116.0.5845.96-2
    • 117.0.5938.132-1
    • 117.0.5938.132-1~deb11u1
    • 117.0.5938.132-1~deb12u1
    • 117.0.5938.132-2
    • 117.0.5938.149-1
    • 117.0.5938.149-1~deb11u1
    • 117.0.5938.149-1~deb12u1
    • 117.0.5938.62-1
    • 117.0.5938.62-1~deb11u1
    • 117.0.5938.62-1~deb12u1
    • 117.0.5938.92-1
    • 118.0.5993.117-1
    • 118.0.5993.117-1~deb11u1
    • 118.0.5993.117-1~deb12u1
    • 118.0.5993.70-1
    • 118.0.5993.70-1~deb11u1
    • 118.0.5993.70-1~deb12u1
    • 119.0.6045.105-1
    • 119.0.6045.105-1~deb11u1
    • 119.0.6045.105-1~deb12u1
    • 119.0.6045.123-1
    • 119.0.6045.123-1~deb11u1
    • 119.0.6045.123-1~deb12u1
    • 119.0.6045.159-1
    • 119.0.6045.159-1~deb11u1
    • 119.0.6045.159-1~deb12u1
    • 119.0.6045.199-1
    • 119.0.6045.199-1~deb11u1
    • 119.0.6045.199-1~deb12u1
    • 120.0.6099.109-1
    • 120.0.6099.109-1~deb11u1
    • 120.0.6099.109-1~deb12u1
    • 120.0.6099.129-1
    • 120.0.6099.129-1~deb11u1
    • 120.0.6099.129-1~deb12u1
    • 120.0.6099.199-1
    • 120.0.6099.199-1~deb11u1
    • 120.0.6099.199-1~deb12u1
    • 120.0.6099.216-1
    • 120.0.6099.216-1~deb11u1
    • 120.0.6099.216-1~deb12u1
    • 120.0.6099.224-1
    • 120.0.6099.224-1~deb11u1
    • 120.0.6099.224-1~deb12u1
    • 120.0.6099.224-2
    • 120.0.6099.71-1
    • 120.0.6099.71-1~deb11u1
    • 120.0.6099.71-1~deb12u1
    • 121.0.6167.139-1
    • 121.0.6167.139-1~deb12u1
    • 121.0.6167.160-1
    • 121.0.6167.160-1~deb12u1
    • 121.0.6167.85-1
    • 121.0.6167.85-1~deb12u1
    • 122.0.6261.111-1
    • 122.0.6261.111-1~deb12u1
    • 122.0.6261.128-1
    • 122.0.6261.128-1~deb12u1
    • 122.0.6261.57-1
    • 122.0.6261.57-1~deb12u1
    • 122.0.6261.94-1
    • 122.0.6261.94-1~deb12u1
    • 123.0.6312.105-1
    • 123.0.6312.105-1~deb12u1
    • 123.0.6312.105-1~deb13u1
    • 123.0.6312.105-2
    • 123.0.6312.122-1
    • 123.0.6312.122-1~deb12u1
    • 123.0.6312.58-1
    • 123.0.6312.86-1
    • 123.0.6312.86-1~deb12u1
    • 124.0.6367.118-1
    • 124.0.6367.118-1~deb12u1
    • 124.0.6367.155-1
    • 124.0.6367.155-1~deb12u1
    • 124.0.6367.201-1
    • 124.0.6367.201-1~deb12u1
    • 124.0.6367.207-1
    • 124.0.6367.207-1~deb12u1
    • 124.0.6367.60-1
    • 124.0.6367.60-1~deb12u1
    • 124.0.6367.60-2
    • 124.0.6367.78-1
    • 124.0.6367.78-1~deb12u1
    • 125.0.6422.112-1
    • 125.0.6422.112-1~deb12u1
    • 125.0.6422.141-1
    • 125.0.6422.141-1~deb12u1
    • 125.0.6422.60-1
    • 125.0.6422.60-1~deb12u1
    • 125.0.6422.76-1
    • 125.0.6422.76-1~deb12u1
    • 126.0.6478.114-1
    • 126.0.6478.114-1~deb12u1
    • 126.0.6478.126-1
    • 126.0.6478.126-1~deb12u1
    • 126.0.6478.126-1~deb13u1
    • 126.0.6478.182-1
    • 126.0.6478.182-1~deb12u1
    • 126.0.6478.56-1
    • 126.0.6478.56-1~deb12u1
    • 127.0.6533.119-1
    • 127.0.6533.119-1~deb13u1
    • 127.0.6533.88-1
    • 127.0.6533.88-1~deb12u1
    • 127.0.6533.99-1
    • 127.0.6533.99-1~deb12u1
    • 128.0.6613.113-1
    • 128.0.6613.113-1~deb12u1
    • 128.0.6613.113-1~deb13u1
    • 128.0.6613.119-1
    • 128.0.6613.119-1~deb12u1
    • 128.0.6613.137-1
    • 128.0.6613.137-1~deb12u1
    • 128.0.6613.84-1
    • 128.0.6613.84-1~deb12u1
    • 129.0.6668.100-1
    • 129.0.6668.100-1~deb12u1
    • 129.0.6668.100-2
    • 129.0.6668.58-1
    • 129.0.6668.58-1~deb12u1
    • 129.0.6668.70-1
    • 129.0.6668.70-1~deb12u1
    • 129.0.6668.89-1
    • 129.0.6668.89-1~deb12u1
    • 130.0.6723.116-1
    • 130.0.6723.116-1~deb12u1
    • 130.0.6723.58-1
    • 130.0.6723.58-1~deb12u1
    • 130.0.6723.69-1
    • 130.0.6723.69-1~deb12u1
    • 130.0.6723.91-1
    • 130.0.6723.91-1~deb12u1
    • 130.0.6723.91-2
    • 131.0.6778.108-1
    • 131.0.6778.108-1~deb12u1
    • 131.0.6778.139-1
    • 131.0.6778.139-1~deb12u1
    • 131.0.6778.204-1
    • 131.0.6778.204-1~deb12u1
    • 131.0.6778.264-1
    • 131.0.6778.264-1~deb12u1
    • 131.0.6778.85-1
    • 131.0.6778.85-1~deb12u1
    • 132.0.6834.110-1
    • 132.0.6834.110-1~deb12u1
    • 132.0.6834.159-1
    • 132.0.6834.159-1~deb12u1
    • 132.0.6834.83-1
    • 133.0.6943.126-1

    Update to 139.0.7258.127-1~deb12u1

  • chromium Debian 13

    Versions
    • 138.0.7204.183-1
    • 139.0.7258.127-1~deb12u1
    • 139.0.7258.66-1
    • 139.0.7258.66-1~deb12u1
    Affected ranges
    • ECOSYSTEM: < 139.0.7258.127-1~deb13u1

    Update to 139.0.7258.127-1~deb13u1

  • chromium Debian 14

    Versions
    • 138.0.7204.183-1
    • 139.0.7258.127-1~deb12u1
    • 139.0.7258.127-1~deb13u1
    • 139.0.7258.66-1
    • 139.0.7258.66-1~deb12u1
    Affected ranges
    • ECOSYSTEM: < 139.0.7258.127-1

    Update to 139.0.7258.127-1

Original sources

Check your server →