¡¾Îó²îͨ¸æ¡¿Google Chrome V8 ÀàÐÍ»ìÏýÎó²î(CVE-2025-8010)

Ðû²¼Ê±¼ä 2025-07-23

Ò»¡¢Îó²î¸ÅÊö


Îó²îÃû³Æ

Google Chrome V8 ÀàÐÍ»ìÏýÎó²î

CVE   ID

CVE-2025-8010

Îó²îÀàÐÍ

ÀàÐÍ»ìÏý

·¢Ã÷ʱ¼ä

2025-07-23

Îó²îÆÀ·Ö

8.8

Îó²îÆ·¼¶

¸ßΣ

¹¥»÷ÏòÁ¿

ÍøÂç

ËùÐèȨÏÞ

ÎÞ

ʹÓÃÄѶÈ

µÍ

Óû§½»»¥

ÐèÒª

PoC/EXP

δ¹ûÕæ

ÔÚҰʹÓÃ

δ·¢Ã÷


Google Chrome ÊÇÓɹȸ迪·¢µÄ¿çƽ̨ÍøÒ³ä¯ÀÀÆ÷£¬£¬£¬£¬ÒÔÆäËÙÂÊ¡¢Çå¾²ÐԺ;«Á·µÄ½çÃæ¶øÖøÃû¡£¡£¡£Ëü»ùÓÚ¿ªÔ´µÄChromiumÏîÄ¿£¬£¬£¬£¬Ö§³ÖÏÖ´úÍøÒ³±ê×¼£¬£¬£¬£¬¾ßÓÐÇ¿Ê¢µÄÀ©Õ¹ÐÔ¡£¡£¡£ChromeµÄɳÏäÊÖÒÕ¿ÉÒÔÏÞÖÆÍøÒ³ÖеĶñÒâ´úÂ룬£¬£¬£¬ÔöÇ¿ä¯ÀÀÆ÷µÄÇå¾²ÐÔ¡£¡£¡£Ëü»¹ÌṩÁËͬ²½¹¦Ð§£¬£¬£¬£¬ÔÊÐíÓû§ÔÚ¶à¸ö×°±¸¼äͬ²½ÊéÇ©¡¢ÀúÊ·¼Í¼µÈÊý¾Ý¡£¡£¡£±ðµÄ£¬£¬£¬£¬Chrome°´ÆÚ¸üУ¬£¬£¬£¬ÐÞ¸´ÒÑÖªÎó²î²¢ÔöÇ¿¹¦Ð§£¬£¬£¬£¬ÊÇÈ«ÇòʹÓÃ×îÆÕ±éµÄä¯ÀÀÆ÷Ö®Ò»¡£¡£¡£


2025Äê7ÔÂ23ÈÕ£¬£¬£¬£¬°ÙÀÖ²©¼¯ÍÅVSRC¼à²âµ½Google ChromeÖб£´æÁ½¸ö¸ßΣÎó²î£ºGoogle Chrome V8 ÀàÐÍ»ìÏýÎó²î£¨CVE-2025-8010£©ºÍ£¨CVE-2025-8011£©¡£¡£¡£¸ÃÀàÎó²îÔ´ÓÚV8ÒýÇæÔÚÔËÐÐʱ¶Ô¹¤¾ßÀàÐÍÅжϲ»ÑÏ£¬£¬£¬£¬¹¥»÷Õß¿Éͨ¹ý½á¹¹Ìض¨ÊäÈ룬£¬£¬£¬ÓÕʹ³ÌÐò½«¹¤¾ßÎóʶ±ðΪ¹ýʧÀàÐÍ£¬£¬£¬£¬´Ó¶øʵÏÖÄÚ´æÔ½½ç»á¼û»òí§Òâ´úÂëÖ´ÐС£¡£¡£ÔÚä¯ÀÀÆ÷ÇéÐÎÏ£¬£¬£¬£¬¹¥»÷Õß¿ÉʹÓøÃÎó²îÓÕµ¼Óû§»á¼û¶ñÒâÍøÒ³£¬£¬£¬£¬´¥·¢¶ñÒâJavaScript´úÂ룬£¬£¬£¬½ø¶ø¿ÉÄÜÈƹýä¯ÀÀÆ÷ɳÏäÏÞÖÆ£¬£¬£¬£¬ÊµÏÖÊý¾ÝÇÔÈ¡¡¢È¨ÏÞÌáÉý»ò¶ÔϵͳµÄ½øÒ»²½¿ØÖÆ£¬£¬£¬£¬Îó²îÆ·¼¶¸ßΣ¡£¡£¡£


¶þ¡¢Ó°Ïì¹æÄ£


Google Chrome (Windows/Mac) < 138.0.7204.168/.169
Google Chrome (Linux) < 138.0.7204.168


Èý¡¢Çå¾²²½·¥


3.1 Éý¼¶°æ±¾


¹Ù·½ÒÑÐû²¼ÐÞ¸´°æ±¾£¬£¬£¬£¬½¨Ò龡¿ìÉý¼¶ÖÁ×îа汾
Google Chrome (Windows/Mac) >= 138.0.7204.168/.169
Google Chrome (Linux) >= 138.0.7204.168


3.2 ÔÝʱ²½·¥


ÔÝÎÞ¡£¡£¡£


3.3 ͨÓý¨Òé


?°´ÆÚ¸üÐÂϵͳ²¹¶¡£¬£¬£¬£¬ïÔ̭ϵͳÎó²î£¬£¬£¬£¬ÌáÉýЧÀÍÆ÷µÄÇå¾²ÐÔ¡£¡£¡£
?ÔöǿϵͳºÍÍøÂçµÄ»á¼û¿ØÖÆ£¬£¬£¬£¬Ð޸ķÀ»ðǽսÂÔ£¬£¬£¬£¬¹Ø±Õ·ÇÐëÒªµÄÓ¦Óö˿ڻòЧÀÍ£¬£¬£¬£¬ïÔÌ­½«Î£ÏÕЧÀÍ£¨ÈçSSH¡¢RDPµÈ£©Ì»Â¶µ½¹«Íø£¬£¬£¬£¬ïÔÌ­¹¥»÷Ãæ¡£¡£¡£
?ʹÓÃÆóÒµ¼¶Çå¾²²úÆ·£¬£¬£¬£¬ÌáÉýÆóÒµµÄÍøÂçÇå¾²ÐÔÄÜ¡£¡£¡£
?ÔöǿϵͳÓû§ºÍȨÏÞÖÎÀí£¬£¬£¬£¬ÆôÓöàÒòËØÈÏÖ¤»úÖƺÍ×îСȨÏÞÔ­Ôò£¬£¬£¬£¬Óû§ºÍÈí¼þȨÏÞÓ¦¼á³ÖÔÚ×îµÍÏ޶ȡ£¡£¡£
?ÆôÓÃÇ¿ÃÜÂëÕ½ÂÔ²¢ÉèÖÃΪ°´ÆÚÐ޸ġ£¡£¡£


3.4 ²Î¿¼Á´½Ó


https://chromereleases.googleblog.com/2025/07/stable-channel-update-for-desktop_22.html