CVE-2025-13223: Google Chromium V8 Type Confusion Vulnerability

High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2025-11-19. EPSS: 5% chance of exploitation in the next 30 days.

Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Affected products

• Google Chrome: before 142.0.7444.175 (fixed in 142.0.7444.175)
• Siemens Cadra: affected versions not specified

Published 2025-11-17. Last modified 2026-07-14.