Known exploited vulnerability · Google

CVE-2025-10585: Google Chromium V8 Type Confusion Vulnerability

criticalCVSS 3.1 9.8Exploited

Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Published Sep 24, 2025 · Updated Jul 14, 2026

Required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Advisory details

From the National Vulnerability Database. This product uses the NVD API but is not endorsed or certified by the NVD.

Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More Google vulnerabilities

All Google entries