How to fix CVE-2025-5068?

Within 24 hours: Issue alert to all staff notifying them of the vulnerability and advising caution with untrusted websites; document current Chrome versions across the organization. Within 7 days: Implement network-level monitoring for exploitation attempts; establish a waitlist for patch deployment once released; consider temporary restrictions on high-risk web browsing. Within 30 days: Deploy the vendor patch immediately upon availability; verify patch deployment across 100% of Chrome instances; conduct incident review if any compromise indicators were detected.

Is Use After Free affected by CVE-2025-5068?

CVE-2025-5068 is a use-after-free vulnerability in Google Chrome that could allow attackers to execute arbitrary code on user systems through malicious web pages.

CVE-2025-5068

EUVD-2025-16694 HIGH

2025-06-03 [email protected]

8.8

CVSS 3.1

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Patch Released

Mar 31, 2026 - 21:13 nvd

Patch available

Analysis Generated

Mar 14, 2026 - 17:04 vuln.today

EUVD ID Assigned

Mar 14, 2026 - 17:04 euvd

EUVD-2025-16694

CVE Published

Jun 03, 2025 - 00:15 nvd

HIGH 8.8

Description

Use after free in Blink in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

Analysis

A security vulnerability in Blink in Google Chrome (CVSS 8.8). High severity vulnerability requiring prompt remediation.

Technical Context

CWE-416 (Use After Free). CVSS 8.8 indicates high severity. Affects Blink in Google Chrome.

Affected Products

['Blink in Google Chrome']

Remediation

Monitor vendor channels for patch availability.

Priority Score

Low Medium High Critical

KEV: 0

EPSS: +0.1

CVSS: +44

POC: 0

Vendor Status

Ubuntu

Priority: Medium

chromium-browser

Release	Status	Version
jammy	not-affected	code not present
noble	not-affected	code not present
oracular	not-affected	code not present
plucky	not-affected	code not present
upstream	released	-

Debian

chromium

Release	Status	Fixed Version	Urgency
bullseye (security), bullseye	vulnerable	120.0.6099.224-1~deb11u1	-
bookworm	fixed	137.0.7151.68-1~deb12u1	-
bookworm (security)	fixed	146.0.7680.71-1~deb12u1	-
trixie	fixed	145.0.7632.159-1~deb13u1	-
trixie (security)	fixed	146.0.7680.71-1~deb13u1	-
forky, sid	fixed	146.0.7680.71-1	-
bullseye	fixed	(unfixed)	end-of-life
(unstable)	fixed	137.0.7151.68-1	-

DSA-5935-1

CVE-2025-5068 vulnerability details – vuln.today

Back

CVE-2025-5068

CVSS Vector

Lifecycle Timeline

Tags

Description

Analysis

Technical Context

Affected Products

Remediation

Priority Score

Vendor Status

Ubuntu

Debian

Share

CVE-2025-5068

CVSS Vector

Lifecycle Timeline

Tags

Description

Analysis

Technical Context

Affected Products

Remediation

Priority Score

Vendor Status

Ubuntu

Debian

Share

External POC / Exploit Code