Type Confusion in V8 Engine of Google Chrome
CVE-2025-1920
8.8HIGH
Summary
A type confusion vulnerability has been identified in the V8 engine of Google Chrome, present in versions before 134.0.6998.88. An attacker could leverage this vulnerability to cause heap corruption by crafting a malicious HTML page, potentially leading to arbitrary code execution. Users are advised to update their browsers to the latest version to mitigate the risk associated with this vulnerability.
Affected Version(s)
Chrome 134.0.6998.88
References
CVSS V3.1
Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved