VULNERABILITY INTELLIGENCE

CVE-2025-10585

CVSS score9.8 CRITICAL

EPSS probability8.97%

CISA KEVKnown exploited vulnerability

Published2025-09-24

Last modified2026-07-14

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

Google Chromium V8 Type Confusion Vulnerability

Vendor / product: Google / Chromium V8

Description

Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Weakness classification

chrome-cve-admin@google.com: CWE-843
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-843

Primary references

chrome-cve-admin@google.com — Release Notes, Vendor Advisory
chrome-cve-admin@google.com — Issue Tracking, Permissions Required
0b142b55-0307-4c5a-b3c9-f314f3fb7c5e — Third Party Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0 — US Government Resource