CVE-2025-13223.

Source-reported disclosure and enrichment record.

SEVERITY / CVSSUnscoredNo severity score in this snapshot.

EXPLOITATION STATUSCISA known exploitedAdded Nov 19, 2025

RECORD STATUSAwaiting NVD dataModified Nov 19, 2025

Disclosure summary

Google Chromium V8 contains a type confusion vulnerability that allows for heap corruption.

CISA remediation guidance

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Original records & references

NIST NVD record
CVE Program record
CISA KEV catalog entry

PUBLISHED 2025-11-19T00:00:00-05:00
MODIFIED 2025-11-19T00:00:00-05:00
INGESTED 2026-10-06T11:42:57-04:00