Skip to content

CVE-2025-12428

CVE

Threat entity extracted from intelligence sources

Frequency
3
occurrences
First Seen
November 2, 2025
Last Seen
November 7, 2025
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Fedora Updates Chromium for Multiple High CVEs in V840.6

Fedora has released updates for Chromium version 142.0.7444.59 addressing several high-severity vulnerabilities in the V8 engine. The vulnerabilities include type confusion, inappropriate implementations, and race conditions, affecting the security of the web browser. Users are advised to update to...

Critical BIND 9 DNS Vulnerability Exploited with Public Code Release39.4

A public exploit for CVE-2025-40778, a critical vulnerability in BIND 9, has been released, enabling DNS cache poisoning and traffic redirection. This flaw affects the widely used Domain Name System software, posing risks to global internet infrastructure. Cybersecurity professionals are urged to ta...

Multiple High-Risk Vulnerabilities in Chromium and CEF Disclosed24.8

Several high-risk vulnerabilities have been identified in Chromium and its embeddable version, CEF, affecting various implementations. Key issues include type confusion and inappropriate implementations in the V8 engine, with multiple CVEs assigned, such as CVE-2025-13042 and CVE-2025-12036. Updates...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

ChromiumInappropriate implementation in App-Bound EncryptionInappropriate implementation in AutofillInappropriate implementation in ExtensionsInappropriate implementation in V8Incorrect security UI in OmniboxObject lifecycle issue in MediaOut of bounds read in V8Out of bounds read in WebXRPolicy bypass in ExtensionsRace in StorageRace in V8