CVE-2025-12428
High · 8.8CVSS
8.8
EPSS
6.9%
Published
Nov 10, 2025
CISA due date
—
The record
Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| openSUSE:Tumbleweed | chromium | 0 | 142.0.7444.59-2.1 |
Related vulnerabilities
- CVE-2026-14137 Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS… Also affects chromium
- CVE-2026-14140 Insufficient validation of untrusted input in Input in Google Chrome on Android prior to… Also affects chromium
- CVE-2026-14141 Incorrect security UI in Document Picture-in-Picture in Google Chrome on Android prior to… Also affects chromium
- CVE-2026-14126 Incorrect security UI in UI in Google Chrome on Android prior to 150.0.7871.47 allowed a… Also affects chromium
- CVE-2026-14124 Inappropriate implementation in CredentialProvider in Google Chrome on Windows prior to… Also affects chromium
- CVE-2026-14134 Inappropriate implementation in Autofill in Google Chrome on Android prior to… Also affects chromium
- CVE-2026-14114 Inappropriate implementation in WebAppInstalls in Google Chrome on Android prior to… Also affects chromium
- CVE-2026-14080 Insufficient validation of untrusted input in TabSwitcher in Google Chrome on Android… Also affects chromium