Add hot topics: Here’s what the official details say:
- CVE-2025-13223 is a type confusion vulnerability in V8, the JavaScript and WebAssembly engine used by Chrome.
- It affects Google Chrome prior to version 142.0.7444.175.
- The flaw occurs because V8 incorrectly assumes the type of an object at runtime, which can lead to heap corruption when those assumptions are violated.
- Attackers can exploit this by crafting a malicious HTML page that triggers the type confusion, allowing remote code execution or browser crashes.
- The vulnerability is classified under CWE-843: Access of Resource Using Incompatible Type (‘Type Confusion’).
- Severity: High, CVSS score 8.8.
- It has been actively exploited in the wild, making it a zero-day prior to patch release. [nvd.nist.gov], [cvedetails.com], [thehackernews.com], [intruceptlabs.com], [securitybo…levard.com]