#v8-javascript-engine

[ follow ]
Information security
fromSecurityWeek
5 days ago

Chrome 146 Update Patches Two Exploited Zero-Days

Google released emergency Chrome 146 update fixing two actively exploited zero-day vulnerabilities in the Skia graphics library and V8 JavaScript engine with CVSS scores of 8.8.
fromZDNET
3 months ago

Update Chrome ASAP - attackers are already exploiting this nasty zero-day flaw

Another day, another zero-day, at least for Google Chrome. In an advisory released Monday, Google warned of a dangerous new security vulnerability affecting its popular browser. Fortunately, the latest update squashes the bug. Here are the details. Rated as a high security flaw, the zero day labeled CVE-2025-13223 is described as: "Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
Information security
[ Load more ]