CVE details

CVE-2025-10585

Type confusion in V8 in Google Chrome prior to 140.

This vulnerability is known to have been exploited in attacks. Update affected browsers immediately.

Severity: Critical
CVSS: 9.8
Published: 2025-09-24
Fixed in: 140.0.7339.185

Description

Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Affected products

Google Chrome · → 140.0.7339.185
Chromium · → 140.0.7339.185

Overlaps: Google Chrome, Chromium

Source

View on NVD

Check if your browser is affected