Google Chromium V8 Type Confusion Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 02/07/2025. Patch affected systems as an emergency.
| Package | Affected versions | Patched versions |
|---|---|---|
| chrome | < 138.0.7204.92< 138.0.7204.96 | 138.0.7204.92138.0.7204.96 |
Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free