¡¾Îó²îͨ¸æ¡¿Chrome V8 ÀàÐÍ»ìÏýÔ¶³ÌÖ´ÐÐÎó²î(CVE-2025-10585)

Ðû²¼Ê±¼ä 2025-09-19

Ò»¡¢Îó²î¸ÅÊö


Îó²îÃû³Æ

Chrome V8 ÀàÐÍ»ìÏýÔ¶³ÌÖ´ÐÐÎó²î

CVE   ID

CVE-2025-10585

Îó²îÀàÐÍ

ÀàÐÍ»ìÏý

·¢Ã÷ʱ¼ä

2025-09-19

Îó²îÆÀ·Ö

8.8

Îó²îÆ·¼¶

¸ßΣ

¹¥»÷ÏòÁ¿

ÍøÂç

ËùÐèȨÏÞ

ÎÞ

ʹÓÃÄѶÈ

µÍ

Óû§½»»¥

ÐèÒª

PoC/EXP

δ¹ûÕæ

ÔÚҰʹÓÃ

ÒÑ·¢Ã÷


Google Chrome ÊÇÓɹȸ迪·¢µÄ¿çƽ̨ÍøÒ³ä¯ÀÀÆ÷£¬£¬£¬ÒÔÆäËÙÂÊ¡¢Çå¾²ÐԺ;«Á·µÄ½çÃæ¶øÖøÃû¡£¡£¡£¡£Ëü»ùÓÚ¿ªÔ´µÄChromiumÏîÄ¿£¬£¬£¬Ö§³ÖÏÖ´úÍøÒ³±ê×¼£¬£¬£¬¾ßÓÐÇ¿Ê¢µÄÀ©Õ¹ÐÔ¡£¡£¡£¡£ChromeµÄɳÏäÊÖÒÕ¿ÉÒÔÏÞÖÆÍøÒ³ÖеĶñÒâ´úÂ룬£¬£¬ÔöÇ¿ä¯ÀÀÆ÷µÄÇå¾²ÐÔ¡£¡£¡£¡£Ëü»¹ÌṩÁËͬ²½¹¦Ð§£¬£¬£¬ÔÊÐíÓû§ÔÚ¶à¸ö×°±¸¼äͬ²½ÊéÇ©¡¢ÀúÊ·¼Í¼µÈÊý¾Ý¡£¡£¡£¡£±ðµÄ£¬£¬£¬Chrome°´ÆÚ¸üУ¬£¬£¬ÐÞ¸´ÒÑÖªÎó²î²¢ÔöÇ¿¹¦Ð§£¬£¬£¬ÊÇÈ«ÇòʹÓÃ×îÆÕ±éµÄä¯ÀÀÆ÷Ö®Ò»¡£¡£¡£¡£


2025Äê9ÔÂ18ÈÕ£¬£¬£¬°ÙÀÖ²©¼¯ÍÅVSRC¼à²âµ½Chrome V8ÒýÇæ·ºÆðÀàÐÍ»ìÏýÎó²î£»£»£» £»£»£»£»¹¥»÷Õß¿Éͨ¹ý½á¹¹¶ñÒâÍøÒ³ÓÕµ¼Óû§»á¼û£¬£¬£¬½ø¶øʹÓÃÄÚ´æ½á¹¹²¢´¥·¢í§Òâ´úÂëÖ´ÐС£¡£¡£¡£¹È¸èÒÑÈ·ÈϸÃÎó²îÔÚÒ°±»Ê¹Óᣡ£¡£¡£Îó²îÆÀ·Ö8.7£¬£¬£¬Îó²î¼¶±ð¸ßΣ¡£¡£¡£¡£


¶þ¡¢Ó°Ïì¹æÄ£


Google Chrome(Windows/Mac) < 140.0.7339.185/.186
Google Chrome(Linux) < 140.0.7339.185


Èý¡¢Çå¾²²½·¥


3.1 Éý¼¶°æ±¾


ÒÑÐû²¼ÐÞ¸´°æ±¾£¬£¬£¬Ç뽫ChromeÉý¼¶µ½ÈçÏ°汾¡£¡£¡£¡£
Google Chrome(Windows/Mac) >= 140.0.7339.185/.186
Google Chrome(Linux) >= 140.0.7339.185


ÏÂÔØÁ´½Ó£ºhttps://www.google.com/intl/zh-CN/chrome/


3.2 ÔÝʱ²½·¥


ÔÝÎÞ¡£¡£¡£¡£


3.3 ͨÓý¨Òé


? °´ÆÚ¸üÐÂϵͳ²¹¶¡£¬£¬£¬ïÔ̭ϵͳÎó²î£¬£¬£¬ÌáÉýЧÀÍÆ÷µÄÇå¾²ÐÔ¡£¡£¡£¡£
? ÔöǿϵͳºÍÍøÂçµÄ»á¼û¿ØÖÆ£¬£¬£¬Ð޸ķÀ»ðǽսÂÔ£¬£¬£¬¹Ø±Õ·ÇÐëÒªµÄÓ¦Óö˿ڻòЧÀÍ£¬£¬£¬ïÔÌ­½«Î£ÏÕЧÀÍ£¨ÈçSSH¡¢RDPµÈ£©Ì»Â¶µ½¹«Íø£¬£¬£¬ïÔÌ­¹¥»÷Ãæ¡£¡£¡£¡£
? Ê¹ÓÃÆóÒµ¼¶Çå¾²²úÆ·£¬£¬£¬ÌáÉýÆóÒµµÄÍøÂçÇå¾²ÐÔÄÜ¡£¡£¡£¡£
? ÔöǿϵͳÓû§ºÍȨÏÞÖÎÀí£¬£¬£¬ÆôÓöàÒòËØÈÏÖ¤»úÖƺÍ×îСȨÏÞÔ­Ôò£¬£¬£¬Óû§ºÍÈí¼þȨÏÞÓ¦¼á³ÖÔÚ×îµÍÏ޶ȡ£¡£¡£¡£
? ÆôÓÃÇ¿ÃÜÂëÕ½ÂÔ²¢ÉèÖÃΪ°´ÆÚÐ޸ġ£¡£¡£¡£


3.4 ²Î¿¼Á´½Ó


https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_17.html/
https://thehackernews.com/2025/09/google-patches-chrome-zero-day-cve-2025.html