CyberICT

CVE-2025-12428

Microsoft · Published October 31, 2025

CVSS v3.1

CRITICAL
Patch availableGet patch

Description

Chromium: CVE-2025-12428 Type Confusion in V8. This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Affected Products

  • Microsoft Edge (Chromium-based)
  • cbl2 nodejs18 18.20.3-12 on CBL-Mariner 2.0

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H