CVE-2025-13223

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 142.0.7444.175

Description A type confusion error exists in the V8 JavaScript engine, which is the component responsible for executing JavaScript code. This issue allows a remote attacker to trigger heap corruption—a condition where memory used by active programs is improperly stored or accessed—by enticing a user to visit a specially crafted HTML page. Successful exploitation can lead to remote code execution, denial of service, or information disclosure, such as the scraping of account names and passwords. This flaw has been actively exploited in the wild and affects other Chromium-based browsers, including Microsoft Edge and Brave.

Recommendations Update Google Chrome to version 142.0.7444.175 or later.