Last seen September 22, 2025

Chrome Type Confusion Vulnerability

Google has released emergency security updates for Chrome to patch CVE-2025-10585, an actively exploited zero-day vulnerability. This critical type confusion flaw resides within the V8 JavaScript and WebAssembly engine, confirmed to be exploited in the wild.

Technical Severity
Low severity
Lifecycle Status

STABLE

Sources

What Happened

Google has released emergency security updates for Chrome to patch CVE-2025-10585, an actively exploited zero-day vulnerability. This critical type confusion flaw resides within the V8 JavaScript and WebAssembly engine, confirmed to be exploited in the wild.

Why This Matters

Publisher reporting describes a security event affecting the. BugSkan could not yet bind a CVE or affected version, so treat the source details as the current record.

Recommended Action

Confirm whether the is present in your environment, compare your versions against the report, and apply available vendor patches or mitigations.

Exposure

My Interests Exposure

Exposure unknown

Recommended Response
Last Seen

Sep 22, 2025 05:30

Exposure reason: This incident does not currently match a technology in My Interests.

Exploitation status: ACTIVELY_EXPLOITED

Primary entities:

GoogleChromeAI Hacking ToolsBitDayFlips

Authoritative Intelligence

CVE CVE-2025-10585 Incident identifier

EPSS is a vulnerability exploitation probability signal, not proof that your environment is exposed. CISA KEV means known exploitation of the vulnerability, not that your system was exploited.

Public GitHub References

Search GitHub for public repositories that mention this CVE. BugSkan only lists repository metadata as a defensive awareness signal — it does not fetch or display exploit code.

CVE-2025-10585 on GitHub

Timeline

  • Incident first seen
    Sep 22, 2025 05:30

    BugSkan first recorded this incident.

  • ⚡ Weekly Recap: Chrome 0-Day, AI Hacking Tools, DDR5 Bit-Flips, npm Worm & More - The Hacker News
    Sep 22, 2025 05:30

    thehackernews.com · Vulnerability

Sources

⚡ Weekly Recap: Chrome 0-Day, AI Hacking Tools, DDR5 Bit-Flips, npm Worm & More - The Hacker News

thehackernews.com · Sep 22, 2025 05:30

Google has released emergency security updates for Chrome to patch CVE-2025-10585, an actively exploited zero-day vulnerability. This critical type confusion flaw resides within the V8 JavaScript and WebAssembly engine, confirmed to be exploited in the wild.

Open publisher source

Other BugSkan incidents that share identifiers, products, or vendors with this report.

My Interests Match

Want personalized relevance?

Create an account to see which incidents overlap with your interests.

← Back to incident intelligence