Google on Monday launched security updates for its Chrome browser to deal with two security flaws, together with one which has come below energetic exploitation within the wild.
The vulnerability in query is CVE-2025-13223 (CVSS rating: 8.8), a kind confusion vulnerability within the V8 JavaScript and WebAssembly engine that might be exploited to attain arbitrary code execution or program crashes.
“Kind Confusion in V8 in Google Chrome previous to 142.0.7444.175 allowed a distant attacker to doubtlessly exploit heap corruption by way of a crafted HTML web page,” in accordance with an outline of the flaw within the NIST Nationwide Vulnerability Database (NVD).
Clément Lecigne of Google’s Menace Evaluation Group (TAG) has been credited with discovering and reporting the flaw on November 12, 2025. Google has not shared any particulars on who’s behind the assaults, who might have been focused, or the size of such efforts.
Nevertheless, the tech large acknowledged that an “exploit for CVE-2025-13223 exists within the wild.”
With the most recent replace, Google has addressed seven zero-day flaws in Chrome which were both actively exploited or demonstrated as a proof-of-concept (PoC) because the begin of the 12 months. The record contains CVE-2025-2783, CVE-2025-4664, CVE-2025-5419, CVE-2025-6554, CVE-2025-6558, and CVE-2025-10585.
CVE-2025-13223 can also be the third actively exploited kind confusion bug found in V8 this 12 months after CVE-2025-6554 and CVE-2025-10585.
Additionally patched by Google as a part of this patch is one other kind confusion vulnerability in V8 (CVE-2025-13224, CVSS rating: 8.8) that was flagged by its synthetic intelligence (AI) agent Huge Sleep.
To safeguard towards potential threats, it is suggested to replace their Chrome browser to variations 142.0.7444.175/.176 for Home windows, 142.0.7444.176 for Apple macOS, and 142.0.7444.175 for Linux. To verify the most recent updates are put in, customers can navigate to Extra > Assist > About Google Chrome and choose Relaunch.
Customers of different Chromium-based browsers, corresponding to Microsoft Edge, Courageous, Opera, and Vivaldi, are additionally suggested to use the fixes as and once they turn into accessible.
