PT-2025-47217 · Google+3 · Google Chrome+4

Published 2025-11-17 · Updated 2026-06-06 · CVE-2025-13223

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 142.0.7444.175

Description A type confusion error exists in the V8 JavaScript engine, which is the component that handles JavaScript execution. Type confusion occurs when a program accesses a resource using an incompatible data type, leading to logic errors. This flaw allows a remote attacker to cause heap corruption—a condition where memory files in active use are not stored properly—by enticing a user to visit a specially crafted HTML page. Successful exploitation can lead to remote code execution, denial of service, or information disclosure, such as the scraping of account names, passwords, and browsing history. This issue has been actively exploited in the wild.

Recommendations Update to version 142.0.7444.175 or later.

Fix

RCE

DoS

Type Confusion

Weakness Enumeration

CWE-843

Related Identifiers

BDU:2025-14497

CVE-2025-13223

DSA-6060-1

OPENSUSE-SU-2025:15745-1

OPENSUSE-SU-2025:20076-1

Affected Products

Alt Linux

Debian

Google Chrome

Red Os

V8

References · 139

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13223 · Security Note
• https://osv.dev/vulnerability/CVE-2025-13223 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-1202SE17 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-13223 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-13223 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-1216SE190 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2026-0224SE18 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-13223 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-13223 · Security Note
• https://bdu.fstec.ru/vul/2025-14497 · Security Note
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20251225SE16 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15745-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:20076-1 · Vendor Advisory
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://reddit.com/r/KryptonSecurity/comments/1p5je7b/resumen_estrat%C3%A9gico_semanal_crisis_de_zerodays_en · Reddit Post