Microsoft Edge Patches Critical V8 Zero-Day Vulnerability – Update Recommended Immediately
Microsoft Edge Patches Critical V8 Zero-Day Vulnerability – Update Recommended Immediately
- Why Enterprise RAID Rebuilding Succeeds Where Consumer Arrays Fail?
- Linus Torvalds Rejects MMC Subsystem Updates for Linux 7.0: “Complete Garbage”
- The Man Who Maintained Sudo for 30 Years Now Struggles to Fund the Work That Powers Millions of Servers
- How Close Are Quantum Computers to Breaking RSA-2048?
- Why Windows 10 Users Are Flocking to Zorin OS 18 Instead of Linux Mint?
- How to Prevent Ransomware Infection Risks?
- What is the best alternative to Microsoft Office?
Microsoft Edge Patches Critical V8 Zero-Day Vulnerability – Update Recommended Immediately
Microsoft released Microsoft Edge version 140.0.3485.81 for desktop platforms via the Stable channel on September 18th.
While no official announcement has been made yet, the update is believed to address four critical security vulnerabilities:
Vulnerabilities Addressed
- CVE-2025-10585: Type Confusion in V8 (High severity)
- CVE-2025-10500: Use after free in Dawn (High severity)
- CVE-2025-10501: Use after free in WebRTC (High severity)
- CVE-2025-10502: Heap buffer overflow in ANGLE (High severity)
Critical Zero-Day Alert
Of particular concern is the type confusion vulnerability in the V8 JavaScript engine (CVE-2025-10585), which has already been exploited in the wild. Despite being rated as “High” severity (the third level out of four), security experts strongly recommend updating as soon as possible due to active exploitation.
This same vulnerability was recently patched in Google Chrome, highlighting the urgency of the fix across Chromium-based browsers.
How to Update
Desktop Microsoft Edge supports Windows, Mac, and Linux platforms and is available for free download from the official Microsoft website. For existing users, the browser will automatically update in the background, requiring no manual intervention.
To manually check for updates:
- Click the menu button (three dots) in the top-right corner
- Navigate to “Help and feedback” → “About Microsoft Edge”
- Or directly access
edge://settings/help
Recommendation
Given the active exploitation of the V8 vulnerability, users should ensure their Microsoft Edge browser is updated to version 140.0.3485.81 or later immediately. The automatic update mechanism should handle this process, but manual verification is recommended for critical security updates like this one.
