In this week’s episode of IT SPARC Cast - CVE of the Week, John Barger and Lou Schmidt dive into CVE-2025-10585, a newly discovered and actively exploited Chrome zero-day vulnerability that targets the V8 JavaScript engine. This type confusion flaw opens the door to arbitrary code execution — and yes, it’s already being used in the wild. With 70% of the browser market affected, this isn’t just a theoretical risk.

John and Lou break down the exploit mechanics, what V8 is and why it’s so critical, and how this CVE marks the sixth Chrome zero-day in 2025 alone. They also discuss mitigation steps and the ripple effects for Chromium-based browsers like Edge, Brave, and Opera. As a bonus, the duo interprets a cryptic (and possibly alarming) listener comment involving fileless malware, COFF loaders, and HTTPS delivery — spooky stuff.

⸻

🔗 IT SPARC Cast

@ITSPARCCast on X

https://www.linkedin.com/company/sparc-sales/ on LinkedIn

🎙️ John Barger

@john_Video on X

https://www.linkedin.com/in/johnbarger/ on LinkedIn

🎙️ Lou Schmidt

@loudoggeek on X

https://www.linkedin.com/in/louis-schmidt-b102446/ on LinkedIn

Hosted on Acast. See acast.com/privacy for more information.