CVE-2025-10585

Fixed in a distro release ExploitedEPSS 6%CVSS 8.8

Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Published 2025-09-24 · In CISA KEV since 2025-09-23 · CVE record · OSV

Products: Google Chrome, Siemens CADRA

Distro releases