Critical Security Update for Chromium - DSA-6004-1
Summary
DSA-6004-1: chromium - security update. Affects chromium versions < 140.0.7339.185-1~deb12u1. Fixed in 140.0.7339.185-1~deb12u1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Chromium is an open-source web browser developed by Google, known for its speed, simplicity, and security features. It serves as the foundation for several other browsers, including Google Chrome. As a widely used browser, it is crucial for users to maintain updated versions to protect against vulnerabilities. The recent security update addresses multiple vulnerabilities that could potentially compromise user data and system integrity.
Vulnerability Detail
The vulnerabilities identified in Chromium, tracked as CVE-2025-10500, CVE-2025-10501, CVE-2025-10502, and CVE-2025-10585, stem from flaws in the browser's handling of web content. These issues could allow attackers to execute arbitrary code, leading to unauthorized access to sensitive information or system resources. The vulnerabilities affect both Debian 12 and 13 versions of Chromium, making it imperative for users to update their installations promptly.
How To Fix
Minimum fixed version
140.0.7339.185-1~deb12u1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade chromiumTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can disable JavaScript in their browser settings to mitigate the risk of exploitation until they can apply the update. However, this may significantly affect the browsing experience.
Conclusion
The recent vulnerabilities in Chromium pose significant risks to users, making it essential to apply the security updates provided in DSA-6004-1. By updating to the patched versions, users can protect themselves from potential attacks and maintain the integrity of their systems.
See every vulnerability recorded for chromium →
FAQ
The vulnerabilities involve flaws in the browser's handling of web content, which could allow attackers to execute arbitrary code.
You can use Vulert's playground at Vulert Scanner to check if your application is affected without needing to sign up.
Failing to update could expose your system to potential attacks, leading to unauthorized access to sensitive data and system resources.
Yes, Vulert can monitor and alert you in real-time for open-source vulnerabilities using just a manifest file like package-lock.json.
As a temporary workaround, you can disable JavaScript in your browser settings to reduce the risk of exploitation.
Related vulnerabilities
Recent vulnerabilities recorded for chromium.
