Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution

Multiple vulnerabilities have been discovered in Google Chrome—notably an out-of-bounds read/write in V8 (CVE-2025-5419) and a use-after-free in Blink (CVE-2025-5068)—that could enable arbitrary code execution in the context of the logged-on user; impact ranges from program installation and data compromise to creation of accounts with elevated rights, with users running non-administrative accounts being less affected.