CVE-2025-10500 — Use-After-Free in Dawn (Graphics Abstraction Layer)
What we know CVE-2025-10500 is a use-after-free flaw in Dawn , a graphics abstraction layer used by Chrome/WebGPU. CyberInsider +2 Daily CyberSecurity +2 Discovered by researcher Gyujeong Jin (Giunash) , reported on ~August 3, 2025. Daily CyberSecurity +1 Classified as High severity . It may lead to memory corruption, crashes, or worse (arbitrary code execution) depending on exploit chaining and sandbox bypasses. Daily CyberSecurity +2 CyberInsider +2 Why this matters Dawn/WebGPU is part of modern browser / GPU stack exposing graphics capabilities. Vulnerabilities there can be leveraged via malicious sites or crafted content. Use-after-free implies memory region being used after its freed — can enable remote attackers (via malicious web content) to corrupt memory, possibly lead to code execution. If exploited successfully, could lead to sandbox escape or privilege escalation within Chrome or any host that uses Dawn. Affected Software / Versions Chro...