bk99.de entertain the web since 1997

bk99.de
hß · SecurityCurated

Google Chrome: critical security hole in web browser

Summary

In August 2025 Google closed a critical hole in Chrome (CVE-2025-9478), a use-after-free bug in the WebGL backend ANGLE. Attackers could exploit the memory bug via prepared websites, which usually leads to the execution of malicious code. The hole was fixed in Chrome 139.0.7258.154/155; Chromium-based browsers such as Edge are likely to be affected as well.

Ideas

  • Use-after-free accesses memory that has already been freed and has undefined content.
  • Graphics interfaces such as WebGL extend the browser’s attack surface.
  • Google only publishes details once most users have updated.
  • Android users receive updates via the Play Store with a delay.

Insights

  • Memory bugs in C++ code remain the main source of critical browser holes.
  • Chromium holes spread to all browsers that use the same foundation.

Facts

  • The hole is in ANGLE, the WebGL rendering backend.
  • In mid-July 2025 Google had already had to close an actively exploited Chrome hole.

References

Critique

  • Since Google gives hardly any details, the assessment regarding code execution is based on the editorial team’s assumptions.

Recommendations

  • Check under “About Google Chrome” that the current version is running, and restart the browser.
  • With Chromium holes, think of all derived browsers in the company, not just Chrome.

Read the original article

Search the Web Archive

hß · 2022

Takeover possible: DrayTek routers with critical security hole

In 2022 Trellix found a critical hole (CVE-2022-32548, CVSS 10.0) in numerous DrayTek routers through which unauthenticated attackers could take over the devices. A logic error in the length check on the login page /cgi-bin/wlogin.cgi led to a buffer overflow, exploitable from the LAN or via the internet if management was reachable there. The researchers found more than 200,000 vulnerable devices on the net.

hß · 2022

Web browsers: Google Chrome and Microsoft Edge 104 close security holes

With Chrome 104 in August 2022, Google closed 27 security holes, at least seven of them high-risk; one earned its discoverer a bounty of 15,000 US dollars. Microsoft followed with Edge 104 and additionally fixed three Edge-specific bugs, including a critical sandbox escape (CVE-2022-33649, CVSS 9.6). Also new were Media Queries Level 4 and Web Bundles for faster loading.

hß · 2017

Dangerous SSH commands: critical security hole in GitLab

In 2017 GitLab contained a critical hole (CVE-2017-12426) through which attackers could execute commands on the server when importing a repository by URL. An option flag injected into the URL caused the rest of the address to be interpreted as a command. Versions 7.9.0 to 9.4.3 were affected; Recurity Labs had previously found similar bugs in Git, Mercurial and other version control systems.