Google on Monday launched safety updates for its Chrome browser to deal with two safety flaws, together with one which has come below lively exploitation within the wild.
The vulnerability in query is CVE-2025-13223 (CVSS rating: 8.8), a sort confusion vulnerability within the V8 JavaScript and WebAssembly engine that may very well be exploited to realize arbitrary code execution or program crashes.
“Kind Confusion in V8 in Google Chrome previous to 142.0.7444.175 allowed a distant attacker to doubtlessly exploit heap corruption through a crafted HTML web page,” in response to an outline of the flaw within the NIST Nationwide Vulnerability Database (NVD).
Clément Lecigne of Google’s Menace Evaluation Group (TAG) has been credited with discovering and reporting the flaw on November 12, 2025. Google has not shared any particulars on who’s behind the assaults, who might have been focused, or the dimensions of such efforts.
Nevertheless, the tech big acknowledged that an “exploit for CVE-2025-13223 exists within the wild.”
With the most recent replace, Google has addressed seven zero-day flaws in Chrome which were both actively exploited or demonstrated as a proof-of-concept (PoC) for the reason that begin of the 12 months. The record contains CVE-2025-2783, CVE-2025-4664, CVE-2025-5419, CVE-2025-6554, CVE-2025-6558, and CVE-2025-10585.
CVE-2025-13223 can be the third actively exploited sort confusion bug found in V8 this 12 months after CVE-2025-6554 and CVE-2025-10585.
Additionally patched by Google as a part of this patch is one other sort confusion vulnerability in V8 (CVE-2025-13224, CVSS rating: 8.8) that was flagged by its synthetic intelligence (AI) agent Large Sleep.
To safeguard towards potential threats, it is suggested to replace their Chrome browser to variations 142.0.7444.175/.176 for Home windows, 142.0.7444.176 for Apple macOS, and 142.0.7444.175 for Linux. To ensure the most recent updates are put in, customers can navigate to Extra > Assist > About Google Chrome and choose Relaunch.
Customers of different Chromium-based browsers, similar to Microsoft Edge, Courageous, Opera, and Vivaldi, are additionally suggested to use the fixes as and once they grow to be accessible.
Elevate your perspective with NextTech Information, the place innovation meets perception.
Uncover the most recent breakthroughs, get unique updates, and join with a worldwide community of future-focused thinkers.
Unlock tomorrow’s developments as we speak: learn extra, subscribe to our publication, and grow to be a part of the NextTech neighborhood at NextTech-news.com
