Google fixed a new actively exploited Chrome zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-10585 | Actively Exploited V8 Type Confusion in Google Chrome (Heap Corruption) | 9.8 | 9% | KEV | KEV |
| CVE-2025-13223 | Actively Exploited V8 Type Confusion in Google Chrome and Siemens Chromium Components | 8.8 | 5% | KEV | KEV |
CVE-2025-14372+1 related CVE | Use after free in Password Manager in Google Chrome prior to 143.0.7499.110 allowed a remote attacker to potentially perform a sandbox escape via a crafted… | 6.1 group max | <1% | ||
| CVE-2025-2783 | Sandbox Escape via Mojo Handle Flaw in Google Chrome on Windows (CVE-2025-2783) | 8.3 | 9% | KEV | KEV |
| CVE-2025-4664 | Insufficient policy enforcement in Loader in Google Chrome prior to 136.0.7103.113 allowed a remote attacker to leak cross-origin data via a crafted HTML page | 4.3 | 6% | ||
| CVE-2025-5419 | Actively Exploited Out-of-Bounds Read/Write in Chromium V8 (Chrome, Edge) | 8.8 | 7% | KEV | KEV |
| CVE-2025-6554 | Type Confusion in Google Chrome V8 Allows Arbitrary Read/Write (Actively Exploited) | 8.1 | 14% | KEV | KEV |
| CVE-2025-6558 | Actively Exploited Input Validation Flaw in Chrome ANGLE/GPU Allows Sandbox Escape | 8.8 | 11% | KEV | KEV |
From the original article
2 min read at securityaffairs.com
Google addressed three vulnerabilities in the Chrome browser, including a high-severity bug already exploited in the wild. Google released security updates to fix three vulnerabilities in the Chrome browser, including a high-severity flaw that threat actors are already exploiting in real-world attacks. “Google is aware that an exploit for 466192044 exists in the wild,” reads the advisory published by Google.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.