Hosted on MSN

Don’t ignore this Chrome update: CERT-In reveals critical V8 engine flaw exploited by hackers

New Delhi: A high-severity security advisory for Google Chrome users has been issued by the Indian Computer Emergency Response Team (CERT-In), which reported a severe remote code execution ...
SecurityWeek

Critical Isolated-vm Vulnerability Leads to RCE on Host

The type confusion bug can lead to V8 sandbox escape and control-flow hijacking of the host process. A critical-severity type ...
GCN

Google fixes Chrome zero-day CVE-2025-10585

Google has released emergency security patches to address CVE-2025-10585, a high-severity zero-day bug in the V8 JavaScript engine of Chrome that has been actively exploited, the sixth Chrome zero-day ...
The Hacker News

Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE

Isolated-vm's ExternalCopy type confusion lets sandboxed code corrupt host memory and potentially reach host RCE; fixes are ...
CSOonline

More work for admins as Google patches latest zero-day Chrome vulnerability

For the third time in recent months, Google has found itself scrambling to fix a potentially serious zero-day flaw in the Chrome browser’s V8 JavaScript engine. Addressed on Monday as part of an ...
CSOonline

Google patches third zero-day flaw in Chrome this year

The vulnerability in the Chrome V8 JavaScript engine is rated as high severity and was discovered by Google’s Threat Analysis Group. The Google Chrome team issued an update to fix a high-severity ...