Google

Google recently addressed a critical zero-day vulnerability (CVE-2025-13223) in its Chrome browser’s V8 JavaScript engine, marking the third such incident in recent months. The flaw, rated 'high' with a CVSS score of 8.8, was actively exploited in the wild before an emergency out-of-band patch was released on Monday. Discovered by Clément Lecigne of Google’s Threat Analysis Group (TAG), the vulnerability posed a significant risk, potentially allowing attackers to execute arbitrary code, compromise user data, or escalate privileges on affected systems. While no specific data breaches or direct financial losses were reported, the exploitation of such a high-severity flaw in a widely used browser like Chrome could have led to large-scale attacks, including phishing, malware distribution, or unauthorized access to sensitive user information. The proactive patching mitigated immediate risks, but the incident underscores the persistent threats posed by zero-day exploits in widely deployed software, which can undermine user trust and expose millions to cyber threats if left unaddressed.

Source: https://www.csoonline.com/article/4092287/more-work-for-admins-as-google-patches-latest-zero-day-chrome-vulnerability.html

Google Cloud Security cybersecurity rating report: https://www.rankiteo.com/company/googlecloudsecurity

"id": "GOO0402404111925",
"linkid": "googlecloudsecurity",
"type": "Vulnerability",
"date": "6/2025",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"

{'affected_entities': [{'industry': 'Technology (Internet, Software)',
                        'location': 'Mountain View, California, USA',
                        'name': 'Google',
                        'size': 'Large (Alphabet Inc. subsidiary)',
                        'type': 'Corporation'}],
 'date_resolved': '2025-MM-DD (Monday, exact date unspecified)',
 'description': 'For the third time in recent months, Google has addressed a '
                'potentially serious zero-day flaw in the Chrome browser’s V8 '
                'JavaScript engine. The vulnerability, identified as '
                'CVE-2025-13223, was discovered by Clément Lecigne of Google’s '
                'Threat Analysis Group (TAG). Evidence suggests the flaw (CVSS '
                "score: 8.8, rated 'high') was being exploited in the wild. An "
                "emergency 'out-of-band' patch was released on Monday to "
                'mitigate the issue.',
 'impact': {'brand_reputation_impact': 'Potential reputational risk due to '
                                       'repeated zero-day exploits',
            'systems_affected': ['Google Chrome browser (V8 JavaScript '
                                 'engine)']},
 'investigation_status': 'Ongoing (evidence of exploitation in the wild '
                         'confirmed)',
 'post_incident_analysis': {'corrective_actions': ['Emergency patch '
                                                   'deployment']},
 'references': [{'source': 'Google Threat Analysis Group (TAG) report '
                           '(implied)'}],
 'response': {'containment_measures': ["Emergency 'out-of-band' patch"],
              'incident_response_plan_activated': True,
              'remediation_measures': ['Patch for CVE-2025-13223']},
 'title': 'Google Chrome Zero-Day Vulnerability (CVE-2025-13223) in V8 '
          'JavaScript Engine',
 'type': 'Zero-day vulnerability',
 'vulnerability_exploited': 'CVE-2025-13223 (V8 JavaScript engine flaw)'}