¡¾Îó²îͨ¸æ¡¿Chrome V8 ÀàÐÍ»ìÏýÔ¶³ÌÖ´ÐÐÎó²î(CVE-2025-10585)

Ðû²¼Ê±¼ä 2025-09-19

Ò»¡¢Îó²î¸ÅÊö


Îó²îÃû³Æ

Chrome V8 ÀàÐÍ»ìÏýÔ¶³ÌÖ´ÐÐÎó²î

CVE   ID

CVE-2025-10585

Îó²îÀàÐÍ

ÀàÐÍ»ìÏý

·¢Ã÷ʱ¼ä

2025-09-19

Îó²îÆÀ·Ö

8.8

Îó²îÆ·¼¶

¸ßΣ

¹¥»÷ÏòÁ¿

ÍøÂç

ËùÐèȨÏÞ

ÎÞ

ʹÓÃÄѶÈ

µÍ

Óû§½»»¥

ÐèÒª

PoC/EXP

δ¹ûÕæ

ÔÚҰʹÓÃ

ÒÑ·¢Ã÷


Google Chrome ÊÇÓɹȸ迪·¢µÄ¿çÆ½Ì¨ÍøÒ³ä¯ÀÀÆ÷£¬ £¬£¬£¬£¬£¬£¬ÒÔÆäËÙÂÊ¡¢Çå¾²ÐԺ;«Á·µÄ½çÃæ¶øÖøÃû¡£¡£¡£¡£Ëü»ùÓÚ¿ªÔ´µÄChromiumÏîÄ¿£¬ £¬£¬£¬£¬£¬£¬Ö§³ÖÏÖ´úÍøÒ³±ê×¼£¬ £¬£¬£¬£¬£¬£¬¾ßÓÐǿʢµÄÀ©Õ¹ÐÔ¡£¡£¡£¡£ChromeµÄɳÏäÊÖÒÕ¿ÉÒÔÏÞÖÆÍøÒ³ÖеĶñÒâ´úÂ룬 £¬£¬£¬£¬£¬£¬ÔöÇ¿ä¯ÀÀÆ÷µÄÇå¾²ÐÔ¡£¡£¡£¡£Ëü»¹ÌṩÁËͬ²½¹¦Ð§£¬ £¬£¬£¬£¬£¬£¬ÔÊÐíÓû§ÔÚ¶à¸ö×°±¸¼äͬ²½ÊéÇ©¡¢ÀúÊ·¼Í¼µÈÊý¾Ý¡£¡£¡£¡£±ðµÄ£¬ £¬£¬£¬£¬£¬£¬Chrome°´ÆÚ¸üУ¬ £¬£¬£¬£¬£¬£¬ÐÞ¸´ÒÑÖªÎó²î²¢ÔöÇ¿¹¦Ð§£¬ £¬£¬£¬£¬£¬£¬ÊÇÈ«ÇòʹÓÃ×îÆÕ±éµÄä¯ÀÀÆ÷Ö®Ò»¡£¡£¡£¡£


2025Äê9ÔÂ18ÈÕ£¬ £¬£¬£¬£¬£¬£¬918²©ÌìÌü¯ÍÅVSRC¼à²âµ½Chrome V8ÒýÇæ·ºÆðÀàÐÍ»ìÏýÎó²î£»£»£»£»£»¹¥»÷Õß¿Éͨ¹ý½á¹¹¶ñÒâÍøÒ³ÓÕµ¼Óû§»á¼û£¬ £¬£¬£¬£¬£¬£¬½ø¶øÊ¹ÓÃÄÚ´æ½á¹¹²¢´¥·¢í§Òâ´úÂëÖ´ÐС£¡£¡£¡£¹È¸èÒÑÈ·ÈϸÃÎó²îÔÚÒ°±»Ê¹Óᣡ£¡£¡£Îó²îÆÀ·Ö8.7£¬ £¬£¬£¬£¬£¬£¬Îó²î¼¶±ð¸ßΣ¡£¡£¡£¡£


¶þ¡¢Ó°Ïì¹æÄ£


Google Chrome(Windows/Mac) < 140.0.7339.185/.186
Google Chrome(Linux) < 140.0.7339.185


Èý¡¢Çå¾²²½·¥


3.1 Éý¼¶°æ±¾


ÒÑÐû²¼ÐÞ¸´°æ±¾£¬ £¬£¬£¬£¬£¬£¬Ç뽫ChromeÉý¼¶µ½Èçϰ汾¡£¡£¡£¡£
Google Chrome(Windows/Mac) >= 140.0.7339.185/.186
Google Chrome(Linux) >= 140.0.7339.185


ÏÂÔØÁ´½Ó£ºhttps://www.google.com/intl/zh-CN/chrome/


3.2 ÔÝʱ²½·¥


ÔÝÎÞ¡£¡£¡£¡£


3.3 ͨÓý¨Òé


? °´ÆÚ¸üÐÂϵͳ²¹¶¡£¡£¡£¡£¬ £¬£¬£¬£¬£¬£¬ïÔ̭ϵͳÎó²î£¬ £¬£¬£¬£¬£¬£¬ÌáÉýЧÀÍÆ÷µÄÇå¾²ÐÔ¡£¡£¡£¡£
ÔöǿϵͳºÍÍøÂçµÄ»á¼û¿ØÖÆ£¬ £¬£¬£¬£¬£¬£¬Ð޸ķÀ»ðǽսÂÔ£¬ £¬£¬£¬£¬£¬£¬¹Ø±Õ·ÇÐëÒªµÄÓ¦Óö˿ڻòЧÀÍ£¬ £¬£¬£¬£¬£¬£¬ïÔÌ­½«Î£ÏÕЧÀÍ£¨ÈçSSH¡¢RDPµÈ£©Ì»Â¶µ½¹«Íø£¬ £¬£¬£¬£¬£¬£¬ïÔÌ­¹¥»÷Ãæ¡£¡£¡£¡£
ʹÓÃÆóÒµ¼¶Çå¾²²úÆ·£¬ £¬£¬£¬£¬£¬£¬ÌáÉýÆóÒµµÄÍøÂçÇå¾²ÐÔÄÜ¡£¡£¡£¡£
ÔöǿϵͳÓû§ºÍȨÏÞÖÎÀí£¬ £¬£¬£¬£¬£¬£¬ÆôÓöàÒòËØÈÏÖ¤»úÖÆºÍ×îСȨÏÞÔ­Ôò£¬ £¬£¬£¬£¬£¬£¬Óû§ºÍÈí¼þȨÏÞÓ¦¼á³ÖÔÚ×îµÍÏÞ¶È¡£¡£¡£¡£
ÆôÓÃÇ¿ÃÜÂëÕ½ÂÔ²¢ÉèÖÃΪ°´ÆÚÐ޸ġ£¡£¡£¡£


3.4 ²Î¿¼Á´½Ó


https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_17.html/
https://thehackernews.com/2025/09/google-patches-chrome-zero-day-cve-2025.html