{"id":145801,"date":"2025-11-18T05:04:15","date_gmt":"2025-11-18T05:04:15","guid":{"rendered":"https:\/\/www.newsbeep.com\/ie\/145801\/"},"modified":"2025-11-18T05:04:15","modified_gmt":"2025-11-18T05:04:15","slug":"google-issues-security-fix-for-actively-exploited-chrome-v8-zero-day-vulnerability","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/ie\/145801\/","title":{"rendered":"Google Issues Security Fix for Actively Exploited Chrome V8 Zero-Day Vulnerability"},"content":{"rendered":"<p>\ue802Nov 18, 2025\ue804Ravie LakshmananBrowser Security \/ Vulnerability<\/p>\n<p><a href=\"https:\/\/www.newsbeep.com\/ie\/wp-content\/uploads\/2025\/11\/chrome-zeroday.jpg\" style=\"display: block;  text-align: center; clear: left; float: left;\"><img decoding=\"async\" src=\"https:\/\/www.newsbeep.com\/ie\/wp-content\/uploads\/2025\/11\/chrome-zeroday.jpg\" alt=\"\" border=\"0\" data-original-height=\"380\" data-original-width=\"728\"\/><\/a><\/p>\n<p>Google on Monday <a href=\"https:\/\/chromereleases.googleblog.com\/2025\/11\/stable-channel-update-for-desktop_17.html\" rel=\"noopener nofollow\" target=\"_blank\">released<\/a> security updates for its Chrome browser to address two security flaws, including one that has come under active exploitation in the wild.<\/p>\n<p>The vulnerability in question is CVE-2025-13223 (CVSS score: 8.8), a type confusion vulnerability in the V8 JavaScript and WebAssembly engine that could be exploited to achieve arbitrary code execution or program crashes.<\/p>\n<p>&#8220;Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page,&#8221; according to a <a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2025-13223\" rel=\"noopener nofollow\" target=\"_blank\">description<\/a> of the flaw in the NIST National Vulnerability Database (NVD).<\/p>\n<p>Cl\u00e9ment Lecigne of Google&#8217;s Threat Analysis Group (TAG) has been credited with discovering and reporting the flaw on November 12, 2025. Google has not shared any details on who is behind the attacks, who may have been targeted, or the scale of such efforts.<\/p>\n<p>However, the tech giant acknowledged that an &#8220;exploit for CVE-2025-13223 exists in the wild.&#8221;<\/p>\n<p><a href=\"https:\/\/thehackernews.uk\/endpoint-protect-d\" rel=\"nofollow noopener sponsored\" target=\"_blank\"><img loading=\"lazy\" decoding=\"async\" class=\"lazyload\" alt=\"CIS Build Kits\" src=\"https:\/\/www.newsbeep.com\/ie\/wp-content\/uploads\/2025\/11\/sem-d.png\" width=\"729\" height=\"91\"\/><\/a><\/p>\n<p>With the latest update, Google has addressed seven zero-day flaws in Chrome that have been either actively exploited or demonstrated as a proof-of-concept (PoC) since the start of the year. The list <a href=\"https:\/\/thehackernews.com\/2025\/09\/google-patches-chrome-zero-day-cve-2025.html\" rel=\"noopener nofollow\" target=\"_blank\">includes<\/a> CVE-2025-2783, CVE-2025-4664, CVE-2025-5419, CVE-2025-6554, CVE-2025-6558, and CVE-2025-10585.<\/p>\n<p>CVE-2025-13223 is also the third actively exploited type confusion bug discovered in V8 this year after CVE-2025-6554 and CVE-2025-10585.<\/p>\n<p>Also patched by Google as part of this patch is another type confusion vulnerability in V8 (<a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/CVE-2025-13224\" rel=\"noopener nofollow\" target=\"_blank\">CVE-2025-13224<\/a>, CVSS score: 8.8) that was flagged by its artificial intelligence (AI) agent <a href=\"https:\/\/thehackernews.com\/2025\/11\/googles-ai-big-sleep-finds-5-new.html\" rel=\"noopener nofollow\" target=\"_blank\">Big Sleep<\/a>.<\/p>\n<p>To safeguard against potential threats, it&#8217;s advised to update their Chrome browser to versions 142.0.7444.175\/.176 for Windows, 142.0.7444.176 for Apple macOS, and 142.0.7444.175 for Linux. To make sure the latest updates are installed, users can navigate to More &gt; Help &gt; About Google Chrome and select Relaunch.<\/p>\n<p>Users of other Chromium-based browsers, such as Microsoft Edge, Brave, Opera, and Vivaldi, are also advised to apply the fixes as and when they become available.<\/p>\n","protected":false},"excerpt":{"rendered":"\ue802Nov 18, 2025\ue804Ravie LakshmananBrowser Security \/ Vulnerability Google on Monday released security updates for its Chrome browser to&hellip;\n","protected":false},"author":2,"featured_media":145802,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[12824,19498,19491,19490,19492,19493,19494,5703,19495,19496,19500,61,14336,60,19501,19499,19497,80,19502],"class_list":["post-145801","post","type-post","status-publish","format-standard","has-post-thumbnail","category-technology","tag-computer-security","tag-cyber-attacks","tag-cyber-news","tag-cyber-security-news","tag-cyber-security-news-today","tag-cyber-security-updates","tag-cyber-updates","tag-data-breach","tag-hacker-news","tag-hacking-news","tag-how-to-hack","tag-ie","tag-information-security","tag-ireland","tag-network-security","tag-ransomware-malware","tag-software-vulnerability","tag-technology","tag-the-hacker-news"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/posts\/145801","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/comments?post=145801"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/posts\/145801\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/media\/145802"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/media?parent=145801"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/categories?post=145801"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/tags?post=145801"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}