CVE-2025-10585

Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML...

Basic Information

CVE State: PUBLISHED
Reserved Date: September 16, 2025
Published Date: September 24, 2025
Last Updated: February 26, 2026
Vendor: Google
Product: Chrome
Description: Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Tags

CVSS Scores

CVSS v3.1

9.8 - CRITICAL

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC Information

Exploitation: active
Technical Impact: total

Exploit Status

Exploited in the Wild: Yes (2026-06-01 10:41:06 UTC) Source

References

https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_17.html https://issues.chromium.org/issues/445380761

Known Exploited Vulnerability Information

Source	Added Date
CVE	2026-06-01 10:41:06 UTC

Timeline

CVE ID Reserved

September 16, 2025
CVE Published to Public

September 24, 2025
Added to KEVIntel

June 01, 2026