CVE-2025-5959

Type Confusion in V8 in Google Chrome prior to 137.0.7151.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted...

Basic Information

CVE State: PUBLISHED
Reserved Date: June 09, 2025
Published Date: June 11, 2025
Last Updated: February 26, 2026
Vendor: Google
Product: Chrome
Description: Type Confusion in V8 in Google Chrome prior to 137.0.7151.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

CVSS Scores

CVSS v3.1

8.8 - HIGH

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC Information

Exploitation: none
Technical Impact: total

Exploit Status

Exploited in the Wild: Yes (2025-07-08 15:46:22 UTC) Source

References

https://chromereleases.googleblog.com/2025/06/stable-channel-update-for-desktop_10.html https://issues.chromium.org/issues/422313191

Known Exploited Vulnerability Information

Source	Added Date
The Shadowserver (via CIRCL)	2025-07-08 15:46:22 UTC

Timeline

CVE ID Reserved

June 09, 2025
CVE Published to Public

June 11, 2025
Added to KEVIntel

July 08, 2025