CVE-2025-13223

KEV High · CVSS 8.8

Google Chrome V8 JavaScript Engine — Type Confusion heap corruption RCE

CVSS: 8.8; nvd
EPSS: 4.83%; 91th pct
KEV: Listed; 2025-11-19
Class: oss containerizable; CWE-843, CWE-843

Description

Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Search profile — drives PoC discovery

Symbols V8Type Confusionheap corruptioncrafted HTML page460017370

Keywords CVE-2025-13223Chrome V8 type confusionV8 heap corruption exploitChrome 142.0.7444.175Chromium 460017370 PoCV8 CWE-843 exploitChrome type confusion RCE 2025

Versions: Google Chrome prior to 142.0.7444.175

References

https://chromereleases.googleblog.com/2025/11/stable-channel-update-for-desktop_17.html
https://issues.chromium.org/issues/460017370
https://cert-portal.siemens.com/productcert/html/ssa-470355.html
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-13223

Status: enriched · ingested 2026-07-14T18:00:20.000Z · profiled 2026-07-14T18:30:20.000Z