Type Confusion in V8 Engine of Google Chrome
CVE-2025-1920

8.8HIGH

Key Information:

Vendor

Google
Status
Chrome
Vendor
CVE Published:
10 March 2025

What is CVE-2025-1920?

A type confusion vulnerability has been identified in the V8 engine of Google Chrome, present in versions before 134.0.6998.88. An attacker could leverage this vulnerability to cause heap corruption by crafting a malicious HTML page, potentially leading to arbitrary code execution. Users are advised to update their browsers to the latest version to mitigate the risk associated with this vulnerability.

Affected Version(s)

Chrome 134.0.6998.88

References

https://chromereleases.googleblog.com/2025/03/stable-chan...
https://issues.chromium.org/issues/398065918

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.