The vulnerability in the Chrome V8 JavaScript engine is rated as high severity and was discovered by Google’s Threat Analysis Group. The Google Chrome team issued an update to fix a high-severity ...

Google has released emergency security patches to address CVE-2025-10585, a high-severity zero-day bug in the V8 JavaScript engine of Chrome that has been actively exploited, the sixth Chrome zero-day ...

The bug was assigned CVE-2025-2135, and we successfully used it to pwn Google’s V8CTF as a zero-day. The root cause lies in TurboFan’s InferMapsUnsafe() function, which fails to handle aliasing when ...