Oct 19, 2026 · 17:39 UTC SEARCH
UNRATED KNOWN EXPLOITED
Vulnerability intelligence

CVE-2025-10585

VendorGoogle
ProductChromium V8
Known exploitedYes
Added to CISA KEVSeptember 23, 2025
KEV due dateOctober 14, 2025
Known ransomware useNot identified by CISA

Google Chromium contains a type confusion vulnerability in the V8 JavaScript and WebAssembly engine.

Required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

CISA KEV status

This vulnerability is listed in CISA’s Known Exploited Vulnerabilities Catalog. Known ransomware campaign use: Unknown.

Stay Ahead of the Threat Landscape

Breach intelligence, vulnerability alerts, and original analysis — delivered as it happens.