Chrome V8 Type Confusion Zero-Day

A critical Type Confusion vulnerability in the V8 JavaScript engine of Google Chrome, actively exploited as a zero-day in targeted attacks. Listed in CISA's KEV catalog.

## Vulnerability Overview
This zero-day vulnerability in Chrome's V8 JIT compiler allows an attacker to achieve Remote Code Execution by simply luring a victim to visit a malicious web page. The V8 engine incorrectly identifies the type of a JavaScript object during JIT compilation, leading to out-of-bounds memory access and ultimately arbitrary code execution.

## Technical Details
- **Type:** Type Confusion in V8 TurboFan JIT Compiler (CWE-843)
- **Root Cause:** The TurboFan optimizing compiler makes incorrect type assumptions about JavaScript objects during speculative optimization. When the speculation is wrong but the type check is insufficient, the engine operates on memory using the wrong type layout, corrupting heap metadata.
- **Sandbox Escape:** Reports indicate that this vulnerability has been chained with a Chrome sandbox escape (separate vulnerability) to achieve full system compromise.
- **Exploitation:** A malicious web page containing specially crafted JavaScript triggers the type confusion during JIT compilation.

## Active Exploitation
- Confirmed in-the-wild exploitation by Google's Threat Analysis Group (TAG).
- Used in targeted attacks against journalists and political activists.
- Added to CISA KEV on February 7, 2025.
- At least 6 distinct exploit variants observed.

## Affected Versions
- Google Chrome < 124.0.6367.201
- Microsoft Edge (Chromium) < 124.0.2478.109
- All Chromium-based browsers before equivalent patches