Chrome Zero-Day CVE-2025-6554 Under Active Attack — Google Issues Security Update
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-2783 | Sandbox Escape via Mojo Handle Flaw in Google Chrome on Windows (CVE-2025-2783) | 8.3 | 9% | KEV | KEV |
| CVE-2025-4664 | Insufficient policy enforcement in Loader in Google Chrome prior to 136.0.7103.113 allowed a remote attacker to leak cross-origin data via a crafted HTML page | 4.3 | 6% | ||
| CVE-2025-5419 | Actively Exploited Out-of-Bounds Read/Write in Chromium V8 (Chrome, Edge) | 8.8 | 8% | KEV | KEV |
| CVE-2025-6554 | Type Confusion in Google Chrome V8 Allows Arbitrary Read/Write (Actively Exploited) | 8.1 | 14% | KEV | KEV |
From the original article
2 min read at thehackernews.com
Ravie Lakshmanan Jul 01, 2025 Vulnerability / Browser Security Google has released security updates to address a vulnerability in its Chrome browser for which an exploit exists in the wild. The zero-day vulnerability, tracked as CVE-2025-6554 (CVSS score: 8. 1), has been described as a type confusion flaw in the V8 JavaScript and WebAssembly engine.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.