Exploited Added to CISA's list November 19, 2025

Google Chromium V8: Type Confusion Vulnerability

What to do: Update Chrome, and other Chromium browsers such as Edge, Brave and Opera. Restart the browser to finish.

Affects: Google Chromium V8
Identifier: CVE-2025-13223
What it is: Google Chromium V8 contains a type confusion vulnerability that allows for heap corruption.
Official guidance: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Details: National Vulnerability Database entry

"Exploited" means CISA has evidence attackers are using this flaw. Being on the list does not mean your device was attacked; it means the update matters.