Oct 20, 2026 · 19:01 UTC SEARCH
UNRATED KNOWN EXPLOITED
Vulnerability intelligence

CVE-2025-13223

VendorGoogle
ProductChromium V8
Known exploitedYes
Added to CISA KEVNovember 19, 2025
KEV due dateDecember 10, 2025
Known ransomware useNot identified by CISA

Google Chromium V8 contains a type confusion vulnerability that allows for heap corruption.

Required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CISA KEV status

This vulnerability is listed in CISA’s Known Exploited Vulnerabilities Catalog. Known ransomware campaign use: Unknown.

Stay Ahead of the Threat Landscape

Breach intelligence, vulnerability alerts, and original analysis — delivered as it happens.