We discovered a type-confusion vulnerability in Chrome’s V8 engine that can be exploited to achieve remote code execution. The bug was assigned CVE-2025-2135, and we successfully used it to pwn Google ...