Chrome V8 Engine Vulnerability Could Enable Remote Code Execution Attacks

EXECUTIVE SUMMARY:

A high-severity flaw has been addressed CVE-2025-12036 in Google Chrome releases for Windows, macOS, and Linux, targeting the V8 JavaScript engine. This flaw could allow a crafted web page to execute arbitrary code in the browsers renderer process, risking data exposure, sandbox escape, or privilege escalation. It should update immediately to the latest version. Organizations must prioritize fleet-wide deployment, apply browser hardening and least-privilege controls, monitor for unusual renderer crashes or suspicious web payloads, and ensure endpoint detection and isolation policies are prepared to contain potential exploit attempts. The vulnerability has a CVSS score of 7.5.