CVE-2025-0291

Chromium: CVE-2025-0291 Type Confusion in V8

CVE-2025-0291 is fixed in 5 products on 2 platforms, first by Microsoft Edge Dev 132.0.2917.0, released October 25, 2024. It is not reported as exploited. Patch Radar priority: High.

HighFixed on 2 platforms
CVSS
8.8
high
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0818
94th percentile

<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p>

Where it's fixed

ProductFixed inFixReleased
Windows apps
Microsoft Edge 132.0.2957.115 Microsoft Edge 132.0.2957.115 Jan 17, 2025
Microsoft Edge Beta 132.0.2957.26 Microsoft Edge Beta 132.0.2957.26 Nov 30, 2024
Microsoft Edge Dev 132.0.2917.0 Microsoft Edge Dev 132.0.2917.0 Oct 25, 2024
Microsoft Edge WebView2 Runtime 132.0.2957.115 Microsoft Edge WebView2 Runtime 132.0.2957.115 Jan 17, 2025
Linux
chromium · Debian 12.15 (bookworm) 131.0.6778.264-1~deb12u1 DSA-5840-1 Jan 9, 2025
chromium · Debian 13.5 (trixie) 131.0.6778.264-1 DEBIAN-CVE-2025-0291 Jan 8, 2025
chromium · Debian 14 131.0.6778.264-1 DEBIAN-CVE-2025-0291 Jan 8, 2025

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.