Last seen November 4, 2025

CVE-2025-43429 Security Incident affecting Google

Evidence indicates that Google is affected by a security issue.

Technical Severity
Low severity
Lifecycle Status

STABLE

What Happened

Evidence indicates that Google is affected by a security issue.

Why This Matters

Current evidence identifies a security issue involving Google, but does not yet support a more specific impact claim.

Recommended Action

No confirmed vendor remediation is available in the current evidence. Confirm whether Google is present in your environment and review the affected configuration.

Exposure

Recommended Response
First Seen

Nov 04, 2025 05:30

Last Seen

Nov 04, 2025 05:30

Exploitation status: UNKNOWN

Primary entities:

Google AI Agents CVE-2025-43429 CVE-2025-43434

Authoritative Intelligence

CVE CVE-2025-43429, CVE-2025-43434 Incident identifier
NVD CVSS 4.3 MEDIUM NVD
FIRST EPSS 0.014 70.4 pct
CWE CWE-119, CWE-416 Weakness classification

Provider evidence: NVD, OSV, FIRST EPSS

EPSS is a vulnerability exploitation probability signal, not proof that your environment is exposed. CISA KEV means known exploitation of the vulnerability, not that your system was exploited.

Timeline

  • Incident first seen
    Nov 04, 2025 05:30

    BugSkan first recorded this incident.

  • Google’s AI ā€˜Big Sleep’ Finds 5 New Vulnerabilities in Apple’s Safari WebKit - The Hacker News
    Nov 04, 2025 05:30

    thehackernews.com Ā· Vulnerability

Sources

Google’s AI ā€˜Big Sleep’ Finds 5 New Vulnerabilities in Apple’s Safari WebKit - The Hacker News

thehackernews.com Ā· Nov 04, 2025 05:30

Google's AI agent "Big Sleep" identified five new security flaws, including buffer overflow (CVE-2025-43429) and use-after-free (CVE-2025-43434) vulnerabilities, within Apple's Safari WebKit component. These critical vulnerabilities, if exploited by processing maliciously crafted web content, could result in unexpected browser crashes or memory corruption, requiring immediate patching via various Apple OS updates.

Open publisher source

Watchlist Match

Want personalized relevance?

Create an account to see which incidents overlap with the technologies you monitor.

← Back to incident intelligence