Skip to main content
Apexward Pulse
3 reportsPriority Medium

Google Chromium V8 Type Confusion Vulnerability

A type confusion vulnerability in Google Chromium's V8 engine has been reported as exploited in the wild, posing a risk to UK organisations using affected software.

First report Latest

What is going on

  • A type confusion vulnerability in Google Chromium's V8 JavaScript and WebAssembly engine was reported with CVE-2025-10585.
  • Another type confusion vulnerability in the same component was reported as CVE-2025-13223 with later exploitation evidence.
  • A separate use-after-free vulnerability in Google Dawn was also reported as exploited in the wild.
  • The vulnerabilities are listed in the CISA Known Exploited Vulnerabilities catalogue.
  • Affected organisations should assess their exposure to these issues.

Reports in this story

Newest first. Each one is a separate event with its own sources and evidence.

Back to the feed