Type Confusion in V8 in Google Chrome prior to 138.0.7204.168 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
References
Link | Resource |
---|---|
https://chromereleases.googleblog.com/2025/07/stable-channel-update-for-desktop_22.html | Release Notes |
https://issues.chromium.org/issues/430344952 | Issue Tracking Permissions Required |
Configurations
Configuration 1 (hide)
AND |
|
History
29 Jul 2025, 16:28
Type | Values Removed | Values Added |
---|---|---|
First Time |
Google
Linux Microsoft windows Linux linux Kernel Google chrome Microsoft Apple Apple macos |
|
References | () https://chromereleases.googleblog.com/2025/07/stable-channel-update-for-desktop_22.html - Release Notes | |
References | () https://issues.chromium.org/issues/430344952 - Issue Tracking, Permissions Required | |
CPE | cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:* |
23 Jul 2025, 14:15
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
Summary |
|
22 Jul 2025, 22:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2025-07-22 22:15
Updated : 2025-07-29 16:28
NVD link : CVE-2025-8010
Mitre link : CVE-2025-8010
CVE.ORG link : CVE-2025-8010
JSON object : View
Products Affected
microsoft
- windows
linux
- linux_kernel
apple
- macos
- chrome
CWE
CWE-843
Access of Resource Using Incompatible Type ('Type Confusion')