Google fixes new Chrome zero-day flaw exploited in attacks

Google released emergency Chrome updates to patch CVE-2025-13223, a high-severity type-confusion zero-day in the V8 JavaScript engine that is being exploited in the wild. This is the seventh Chrome zero-day fixed this year; Google TAG reported the issue and Google is restricting technical details while rolling out fixes—users should update Chrome to the patched versions immediately.