Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2025-13227: Google Chrome: Type Confusion Allows Remote Code Execution

CVE-2025-13227 · published 11 months ago

Summary

Google Chrome versions prior to 142.0.7444.59 may be exploited by a remote attacker to corrupt system memory, potentially leading to unauthorized actions on a user's device. To fix this, update Google Chrome to the latest version. Regular updates are essential for protecting against known security risks.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
google	chrome	< 142.0.7444.59 < 142.0.7444.60 `cpe:2.3:a:google:chrome::::::::`

Original advisory text

Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

References

https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop_... Release Notes Vendor Advisory
https://issues.chromium.org/issues/446122633 Issue Tracking Permissions Required

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker full control

Severity

8.8 High

Exploitation

<1% chance of attack within 30 days

Type

CWE-843Type Confusion

Timeline

Published18 Nov 2025

Updated4 Nov 2026

First seen7 Mar 2026

Sources

CVE-2025-13227 · NVD

Track software like this

Free during beta