CVE-2025-10585: New Chrome V8 Zero-Day Exploited in the Wild

Google has released a security update for Chrome users, involving a serious vulnerability that is exploited in the wild. The flaw, identified as CVE-2025-10585, affects the V8 JavaScript and WebAssembly engine that powers core browser functionality. If you use Chrome, or any Chromium-based browser like Edge or Brave, this is a patch you do not want to ignore.

What Is CVE-2025-10585?

CVE-2025-10585 is a newly discovered zero-day vulnerability caused by a type confusion issue in Chrome’s V8 engine, which handles JavaScript and WebAssembly code execution. Google has rated it as “high severity” and confirmed that it’s being actively exploited – this type of flaw could allow attackers to crash the browser, or even execute arbitrary code.

Google’s Threat Analysis Group (TAG) reported the vulnerability on September 16, just one day before the advisory was published. Technical specifics are currently withheld to prevent further abuse before users update.

Other Security Fixes in This Update

CVE-2025-10585 was not the only fix rolled out. The September 17 Stable Channel update also patched three other high-severity vulnerabilities:

CVE-2025-10500: Use-after-free bug in Dawn
CVE-2025-10501: Use-after-free issue in WebRTC.
CVE-2025-10502: Heap buffer overflow in ANGLE

While none of these were confirmed as exploited, their severity ratings make them just as important to patch.

SOCRadar’s Vulnerability Intelligence

When new vulnerabilities are disclosed, or before they become widely known, security teams need more than patch notes. They need context. SOCRadar’s Cyber Threat Intelligence (CTI) module delivers real-time insights into the latest CVEs, confirmed exploit activity, and attacker behaviors.

With Vulnerability Intelligence, you can quickly understand which flaws matter most to your environment, prioritize fixes, and reduce exposure before adversaries make their move.

Update Chrome Now to Stay Protected

To stay protected, make sure your browser is up to date and monitor for related vulnerability disclosures. Regularly updating Chrome or any Chromium-based browser is essential, as fixes are rolled out through version updates.

The patched versions are: