CVE-2025-10585 Security Incident affecting Chromium V8

Evidence indicates that Chromium V8 is affected by a security issue. Exploitation evidence is classified as confirmed in the wild.

What Happened

Evidence indicates that Chromium V8 is affected by a security issue. Exploitation evidence is classified as confirmed in the wild.

Why This Matters

Current evidence identifies a security issue involving Chromium V8, but does not yet support a more specific impact claim.

Recommended Action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. Confirm whether Chromium V8 is present in your environment and review the affected configuration.

Exposure

Exploitation status: CONFIRMED_IN_THE_WILD

Primary entities:

Authoritative Intelligence

Provider evidence: NVD, OSV, CISA KEV, FIRST EPSS

EPSS is a vulnerability exploitation probability signal, not proof that your environment is exposed. CISA KEV means known exploitation of the vulnerability, not that your system was exploited.

Timeline

• Incident first seen
  Sep 22, 2025 05:30

  BugSkan first recorded this incident.

• ⚡ Weekly Recap: Chrome 0-Day, AI Hacking Tools, DDR5 Bit-Flips, npm Worm & More - The Hacker News
  Sep 22, 2025 05:30

  thehackernews.com · Vulnerability

Sources

Watchlist Match