System	Score	Found at
cvssv3	8.8	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-13223.json
epss	0.02686	https://api.first.org/data/v1/epss?cve=CVE-2025-13223
epss	0.02686	https://api.first.org/data/v1/epss?cve=CVE-2025-13223
epss	0.02686	https://api.first.org/data/v1/epss?cve=CVE-2025-13223
epss	0.02686	https://api.first.org/data/v1/epss?cve=CVE-2025-13223
epss	0.02686	https://api.first.org/data/v1/epss?cve=CVE-2025-13223
epss	0.02686	https://api.first.org/data/v1/epss?cve=CVE-2025-13223
epss	0.02686	https://api.first.org/data/v1/epss?cve=CVE-2025-13223
epss	0.02686	https://api.first.org/data/v1/epss?cve=CVE-2025-13223
cvssv3.1	8.8	https://chromereleases.googleblog.com/2025/11/stable-channel-update-for-desktop_17.html
ssvc	Attend	https://chromereleases.googleblog.com/2025/11/stable-channel-update-for-desktop_17.html
cvssv3.1	8.8	https://issues.chromium.org/issues/460017370
ssvc	Attend	https://issues.chromium.org/issues/460017370

Reference id	Reference type	URL
		https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-13223.json
		https://api.first.org/data/v1/epss?cve=CVE-2025-13223
		https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13223
2415523		https://bugzilla.redhat.com/show_bug.cgi?id=2415523
460017370		https://issues.chromium.org/issues/460017370
stable-channel-update-for-desktop_17.html		https://chromereleases.googleblog.com/2025/11/stable-channel-update-for-desktop_17.html

Data source	KEV
Date added	Nov. 19, 2025
Description	Google Chromium V8 contains a type confusion vulnerability that allows for heap corruption.
Required action	Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Due date	Dec. 10, 2025
Note	https://chromereleases.googleblog.com/2025/11/stable-channel-update-for-desktop_17.html ; https://nvd.nist.gov/vuln/detail/CVE-2025-13223
Ransomware campaign use	Unknown

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-13223.json

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://chromereleases.googleblog.com/2025/11/stable-channel-update-for-desktop_17.html

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

---

Vector: SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-11-20T04:55:21Z/ Found at https://chromereleases.googleblog.com/2025/11/stable-channel-update-for-desktop_17.html

---

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Found at https://issues.chromium.org/issues/460017370

Attack Vector (AV)	Attack Complexity (AC)	Privileges Required (PR)	User Interaction (UI)	Scope (S)	Confidentiality Impact (C)	Integrity Impact (I)	Availability Impact (A)
network adjacent_network local physical	low high	none low high	none required	unchanged changed	high low none	high low none	high low none

---

Vector: SSVCv2/E:A/A:N/T:T/P:M/B:A/M:M/D:A/2025-11-20T04:55:21Z/ Found at https://issues.chromium.org/issues/460017370

---

Percentile	0.85792
EPSS Score	0.02686
Published At	April 2, 2026, 12:55 p.m.

Date	Actor	Action	Source	VulnerableCode Version
2026-04-01T13:34:57.743673+00:00	RedHat Importer	Import	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-13223.json	38.0.0