¡¾·ì϶¹«¸æ¡¿Google Chrome V8 ÀàÐÍ»ìºÏ·ì϶ (CVE-2025-6554)

°ä²¼¹¦·ò 2025-07-02

Ò»¡¢¡¢¡¢·ì϶¸ÅÊö


·ì϶Ãû³Æ

Google Chrome V8 ÀàÐÍ»ìºÏ·ì϶

CVE   ID

CVE-2025-6554

·ì϶ÀàÐÍ

ÀàÐÍ»ìºÏ·ì϶

·¢ÏÖ¹¦·ò

2025-07-02

·ì϶ÆÀ·Ö

8.1

·ì϶µÈ¼¶

¸ßΣ

¹¥»÷ÏòÁ¿

ÍøÂç

ËùÐèȨÏÞ

ÎÞ

ÀûÓÃÄѶÈ

µÍ

Óû§½»»¥

±ØÒª

PoC/EXP

δ¹«¿ª

ÔÚÒ°ÀûÓÃ

δ·¢ÏÖ


Google Chrome ÊÇÓɹȸ迪·¢µÄ¿çÆ½Ì¨ÍøÒ³ä¯ÀÀÆ÷£¬ÒÔÆäËÙ¶È¡¢¡¢¡¢°²È«ÐԺͼò½àµÄ½çÃæ¶øÎÅÃû¡£¡£¡£¡£Ëü»ùÓÚ¿ªÔ´µÄChromiumÏîÄ¿£¬Ö§³ÖÏÖ´úÍøÒ³³ß¶È£¬ÓµÓÐ׳´óµÄÀ©´óÐÔ¡£¡£¡£¡£ChromeµÄɳÏä¼¼ÊõÄܹ»ÏÞ¶ÈÍøÒ³ÖеĶñÒâ´úÂ룬¼ÓÇ¿ä¯ÀÀÆ÷µÄ°²È«ÐÔ¡£¡£¡£¡£Ëü»¹ÌṩÁËͬ²½Ö°ÄÜ£¬ÔÊÐíÓû§ÔÚ¶à¸öÉ豸¼äͬ²½ÊéÇ©¡¢¡¢¡¢º¹Çà¼Í¼µÈÊý¾Ý¡£¡£¡£¡£´ËÍ⣬Chrome¶¨ÆÚ¸üУ¬ÐÞ¸´ÒÑÖª·ì϶²¢¼ÓǿְÄÜ£¬ÊÇÈ«ÇòʹÓÃ×î¿í·ºµÄä¯ÀÀÆ÷Ö®Ò»¡£¡£¡£¡£


2025Äê7ÔÂ2ÈÕ£¬OG¶«·½Ìü¼¯ÍÅVSRC¼à²âµ½Chrome°ä²¼µÄ°²È«²¼¸æ£¬Ö¸³öGoogle Chrome 138.0.7204.96¼°Ö®Ç°°æ±¾ÖеÄV8ÀàÐÍ»ìºÏ·ì϶£¨CVE-2025-6554£©¡£¡£¡£¡£¸Ã·ì϶ÔÊÐíÔ¶³Ì¹¥»÷Õßͨ¹ý¾«ÐÄ»ú¹ØµÄHTMLÒ³ÃæÖ´ÐÐËÁÒâ¶Á/д²Ù×÷¡£¡£¡£¡£GoogleÒÑÖª¸Ã·ì϶Òѱ»¶ñÒâÀûÓ㬷ì϶ÆÀ·ÖΪ8.1·Ö£¬·ì϶¼¶±ðΪ¸ßΣ¡£¡£¡£¡£½¨ÒéÓû§¾¡¿ì¸üÐÂÖÁÐÞ¸´°æ±¾£¬ÒÔÔ¤·ÀDZÔÚ·çÏÕ¡£¡£¡£¡£


¶þ¡¢¡¢¡¢Ó°ÏìÁìÓò


Google Chrome(Windows) < 138.0.7204.96/.97
Google Chrome(MacOS) < 138.0.7204.92/.93
Google Chrome(Linux) < 138.0.7204.96¡£¡£¡£¡£


Èý¡¢¡¢¡¢°²È«´ëÊ©


3.1 Éý¼¶°æ±¾


¹Ù·½ÒѰ䲼ÐÞ¸´°æ±¾£¬½¨ÒéÊÜÓ°ÏìÓû§¾¡¿ì¸üС£¡£¡£¡£


ÏÂÔØÁ´½Ó£ºhttps://www.google.cn/chrome/


3.2 һʱ´ëÊ©


ÔÝÎÞ¡£¡£¡£¡£


3.3 ͨÓý¨Òé


?¶¨ÆÚ¸üÐÂϵͳ²¹¶¡£¬Ï÷¼õϵͳ·ì϶£¬ÌáÉý·þÎñÆ÷µÄ°²È«ÐÔ¡£¡£¡£¡£
?¼ÓǿϵͳºÍÍøÂçµÄ½Ó¼û½ÚÖÆ£¬Åú¸Ä·À»ðǽսÊõ£¬¹Ø±Õ·Ç±ØÒªµÄÀûÓö˿ڻò·þÎñ£¬Ï÷¼õ½«Î£ÏÕ·þÎñ£¨ÈçSSH¡¢¡¢¡¢RDPµÈ£©Â¶³öµ½¹«Íø£¬Ï÷¼õ¹¥»÷Ãæ¡£¡£¡£¡£
?ʹÓÃÆóÒµ¼¶°²È«²úÆ·£¬ÌáÉýÆóÒµµÄÍøÂ簲ȫ»úÄÜ¡£¡£¡£¡£
?¼ÓǿϵͳÓû§ºÍȨÏÞÖÎÀí£¬ÆôÓöà³É·ÖÈÏÖ¤»úÖÆºÍ×îСȨÏÞ×¼Ôò£¬Óû§ºÍÈí¼þȨÏÞӦά³ÖÔÚ×îµÍÏÞ¶È¡£¡£¡£¡£

?ÆôÓÃÇ¿ÃÜÂëÕ½Êõ²¢ÉèÖÃΪ¶¨ÆÚÅú¸Ä¡£¡£¡£¡£


3.4 ²Î¿¼Á´½Ó


https://chromereleases.googleblog.com/2025/06/stable-channel-update-for-desktop_30.html
https://nvd.nist.gov/vuln/detail/CVE-2025-6554