Cloud Vulnerability DB
A community-led vulnerabilities database
Vulnerability DatabaseCVE-2025-11205
CVE-2025-11205:
vulnerability analysis and mitigation
Overview
A high-severity vulnerability identified as CVE-2025-11205 was discovered in Chrome's WebGPU implementation. The vulnerability was reported by Atte Kettunen of OUSPG on September 2, 2025, and was subsequently patched in Chrome version 141.0.7390.54 released on September 30, 2025. The issue affects Chrome browsers across Windows, Mac, and Linux platforms (Chrome Release).
Technical details
The vulnerability is classified as a heap buffer overflow in WebGPU, which earned a high-severity rating and a substantial bug bounty of $25,000, indicating its critical nature. The technical details of the vulnerability were initially restricted to prevent exploitation before users could update to the patched version (Chrome Release).
Impact
While specific impact details were initially restricted, as a heap buffer overflow vulnerability, it could potentially lead to arbitrary code execution or system compromise if successfully exploited (Debian Security).
Mitigation and workarounds
The vulnerability has been patched in Chrome version 141.0.7390.54 for Windows, Mac, and Linux. Debian-based systems received fixes in version 141.0.7390.54-1~deb12u1 for bookworm and 141.0.7390.54-1~deb13u1 for trixie distributions. Users are strongly advised to upgrade their Chrome browsers to the latest version (Debian Security, Chrome Release).
Additional resources
Source: This report was generated using AI
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Additional Wiz resources
Get a personalized demo
Ready to see Wiz in action?
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management