¡¾Îó²îͨ¸æ¡¿Chrome V8 ÀàÐÍ»ìÏýÔ¶³ÌÖ´ÐÐÎó²î(CVE-2025-10585)

Ðû²¼Ê±¼ä 2025-09-19

Ò»¡¢Îó²î¸ÅÊö


Îó²îÃû³Æ

Chrome V8 ÀàÐÍ»ìÏýÔ¶³ÌÖ´ÐÐÎó²î

CVE   ID

CVE-2025-10585

Îó²îÀàÐÍ

ÀàÐÍ»ìÏý

·¢Ã÷ʱ¼ä

2025-09-19

Îó²îÆÀ·Ö

8.8

Îó²îÆ·¼¶

¸ßΣ

¹¥»÷ÏòÁ¿

ÍøÂç

ËùÐèȨÏÞ

ÎÞ

ʹÓÃÄѶÈ

µÍ

Óû§½»»¥

ÐèÒª

PoC/EXP

δ¹ûÕæ

ÔÚҰʹÓÃ

ÒÑ·¢Ã÷


Google Chrome ÊÇÓɹȸ迪·¢µÄ¿çƽ̨ÍøÒ³ä¯ÀÀÆ÷£¬£¬£¬£¬ÒÔÆäËÙÂÊ¡¢Çå¾²ÐԺ;«Á·µÄ½çÃæ¶øÖøÃû¡£¡£¡£Ëü»ùÓÚ¿ªÔ´µÄChromiumÏîÄ¿£¬£¬£¬£¬Ö§³ÖÏÖ´úÍøÒ³±ê×¼£¬£¬£¬£¬¾ßÓÐÇ¿Ê¢µÄÀ©Õ¹ÐÔ¡£¡£¡£ChromeµÄɳÏäÊÖÒÕ¿ÉÒÔÏÞÖÆÍøÒ³ÖеĶñÒâ´úÂ룬£¬£¬£¬ÔöÇ¿ä¯ÀÀÆ÷µÄÇå¾²ÐÔ¡£¡£¡£Ëü»¹ÌṩÁËͬ²½¹¦Ð§£¬£¬£¬£¬ÔÊÐíÓû§ÔÚ¶à¸ö×°±¸¼äͬ²½ÊéÇ©¡¢ÀúÊ·¼Í¼µÈÊý¾Ý¡£¡£¡£±ðµÄ£¬£¬£¬£¬Chrome°´ÆÚ¸üУ¬£¬£¬£¬ÐÞ¸´ÒÑÖªÎó²î²¢ÔöÇ¿¹¦Ð§£¬£¬£¬£¬ÊÇÈ«ÇòʹÓÃ×îÆÕ±éµÄä¯ÀÀÆ÷Ö®Ò»¡£¡£¡£


2025Äê9ÔÂ18ÈÕ£¬£¬£¬£¬¼øºÚµ£±£Íø¼¯ÍÅVSRC¼à²âµ½Chrome V8ÒýÇæ·ºÆðÀàÐÍ»ìÏýÎó²î£»£»£»£»£»£»£»¹¥»÷Õß¿Éͨ¹ý½á¹¹¶ñÒâÍøÒ³ÓÕµ¼Óû§»á¼û£¬£¬£¬£¬½ø¶øʹÓÃÄÚ´æ½á¹¹²¢´¥·¢í§Òâ´úÂëÖ´ÐС£¡£¡£¹È¸èÒÑÈ·ÈϸÃÎó²îÔÚÒ°±»Ê¹Óᣡ£¡£Îó²îÆÀ·Ö8.7£¬£¬£¬£¬Îó²î¼¶±ð¸ßΣ¡£¡£¡£


¶þ¡¢Ó°Ïì¹æÄ£


Google Chrome(Windows/Mac) < 140.0.7339.185/.186
Google Chrome(Linux) < 140.0.7339.185


Èý¡¢Çå¾²²½·¥


3.1 Éý¼¶°æ±¾


ÒÑÐû²¼ÐÞ¸´°æ±¾£¬£¬£¬£¬Ç뽫ChromeÉý¼¶µ½ÈçÏ°汾¡£¡£¡£
Google Chrome(Windows/Mac) >= 140.0.7339.185/.186
Google Chrome(Linux) >= 140.0.7339.185


ÏÂÔØÁ´½Ó£ºhttps://www.google.com/intl/zh-CN/chrome/


3.2 ÔÝʱ²½·¥


ÔÝÎÞ¡£¡£¡£


3.3 ͨÓý¨Òé


? °´ÆÚ¸üÐÂϵͳ²¹¶¡£¬£¬£¬£¬ïÔ̭ϵͳÎó²î£¬£¬£¬£¬ÌáÉýЧÀÍÆ÷µÄÇå¾²ÐÔ¡£¡£¡£
? ÔöǿϵͳºÍÍøÂçµÄ»á¼û¿ØÖÆ£¬£¬£¬£¬Ð޸ķÀ»ðǽսÂÔ£¬£¬£¬£¬¹Ø±Õ·ÇÐëÒªµÄÓ¦Óö˿ڻòЧÀÍ£¬£¬£¬£¬ïÔÌ­½«Î£ÏÕЧÀÍ£¨ÈçSSH¡¢RDPµÈ£©Ì»Â¶µ½¹«Íø£¬£¬£¬£¬ïÔÌ­¹¥»÷Ãæ¡£¡£¡£
? Ê¹ÓÃÆóÒµ¼¶Çå¾²²úÆ·£¬£¬£¬£¬ÌáÉýÆóÒµµÄÍøÂçÇå¾²ÐÔÄÜ¡£¡£¡£
? ÔöǿϵͳÓû§ºÍȨÏÞÖÎÀí£¬£¬£¬£¬ÆôÓöàÒòËØÈÏÖ¤»úÖƺÍ×îСȨÏÞÔ­Ôò£¬£¬£¬£¬Óû§ºÍÈí¼þȨÏÞÓ¦¼á³ÖÔÚ×îµÍÏ޶ȡ£¡£¡£
? ÆôÓÃÇ¿ÃÜÂëÕ½ÂÔ²¢ÉèÖÃΪ°´ÆÚÐ޸ġ£¡£¡£


3.4 ²Î¿¼Á´½Ó


https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_17.html/
https://thehackernews.com/2025/09/google-patches-chrome-zero-day-cve-2025.html