Google has patched vulnerabilities in Chrome versions prior to 142.0.7444.175. The vulnerabilities are located in Chrome's V8 engine and allow external attackers to exploit heap corruption via specially crafted HTML pages. This can lead to unauthorized actions such as access to sensitive data or execution of arbitrary code. Google reports that CVE-2025-13223 is being actively exploited. Successful exploitation requires the attacker to deceive victims into visiting a malicious page.