Chromium Security Update (MINDBREEZE36819)

ID: MINDBREEZE36819 
Affected Components: Mindbreeze InSpire, Mindbreeze InSpire SaaS 
Severity: 8.8 High 
Status: Final 
First published: October 15, 2025 
CVEs: CVE-2025-8010, CVE-2025-8011, CVE-2025-8292, CVE-2025-8576, CVE-2025-8577, CVE-2025-8578, CVE-2025-8579, CVE-2025-8580, CVE-2025-8581, CVE-2025-8582, CVE-2025-8583, CVE-2025-8879, CVE-2025-8880, CVE-2025-8901, CVE-2025-8881, CVE-2025-8882, CVE-2025-9132, CVE-2025-9478 

Summary 

  • chromium - Component: Type Confusion in V8.
  • chromium - Component: Use after free in Media Stream.
  • chromium - Component: Use after free in Extensions.
  • chromium - Component: Use after free in Cast.
  • chromium - Component: Use after free in Aura.
  • chromium - Component: Use after free in ANGLE
  • chromium - Component: Inappropriate implementation in Picture In Picture.
  • chromium - Component: Inappropriate implementation in Gemini Live in Chrome.
  • chromium - Component: Inappropriate implementation in Filesystems.
  • chromium - Component: Inappropriate implementation in Extensions.
  • chromium - Component: Inappropriate implementation in Permissions.
  • chromium - Component: Inappropriate implementation in File Picker.
  • chromium - Component: Insufficient validation of untrusted input in DOM.
  • chromium - Component: Heap buffer overflow in libaom.
  • chromium - Component: Race in V8.
  • chromium - Component: Out of bounds write in ANGLE.
  • chromium - Component: Out of bounds write in V8. 

 

Hotfix Information 

Fixed with following versions of Mindbreeze InSpire On-Premises or Mindbreeze InSpire SaaS: 

  • Mindbreeze InSpire 25.6 Release
  • Mindbreeze InSpire SaaS 25.6 Release