What’s Vulnerable › Vulnerabilities

CVE-2025-2073

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-04-16 · updated 2026-06-17
• Weakness: CWE-125

Description

Out-of-Bounds Read in netfilter/ipset in Linux Kernel ChromeOS [6.1, 5.15, 5.10, 5.4, 4.19] allows a local attacker with low privileges to trigger an out-of-bounds read, potentially leading to information disclosure

Affected products

• Google ChromeOS: 16093.103.0

References

• https://issues.chromium.org/issues/b/380043638
• https://issuetracker.google.com/issues/380043638

Get alerted when CVE-2025-2073 or the next vulnerability affects your stack