Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
Type Confusion in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-31 | 1 | Disclosure1 |
| 2026-05-05 | 1 | PoC1 |
| 2026-05-07 | 1 | General1 |
Fuzzing to Zero-Day: Pwning V8CTF With TurboFan Type Confusion, CVE-2025-2135 - @zellic_io https://www.zellic.io/blog/pwning-v8ctf/
Post summary
The blog post announces a zero‑day type‑confusion bug in V8 (CVE‑2025‑2135) and shares a proof‑of‑concept, but does not mention active exploitation, patches, or debunking claims.
@pentest_swissky @zellic_io Fuzzing-to-zero-day pipelines are quietly becoming the most productive path in browser security research. This is a great example of why. CVE-2025-2135 is live in our feed at http://vulntracker.io - Chrome exposure tracking included
Post summary
The tweet simply notes that CVE‑2025‑2135 appears in a feed and includes Chrome exposure tracking, without providing technical, exploitation, or mitigation details.
🔒 Pwning V8 with Turbofan Type Confusion (CVE-2025-2135) Zellic discovered a critical type-confusion vulnerability (CVE-2025-2135) in Chrome's V8 engine that enables remote code execution. This f... http://crustylabs.ai #CyberSecurity #InfoSec #CrustyTLDR
Post summary
Zellic announced CVE‑2025‑2135, a type‑confusion flaw in Chrome’s V8 engine that could lead to remote code execution. No proof‑of‑concept, exploit code, or patch details were supplied.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | chrome | - | - | - |