<![CDATA[Google warns of new Chrome zero-day bug exploited in attacks]]>Google has shipped a substantial patch batch for Chrome, resolving 230 security issues on Tuesday. Among them is a critical fix for a newly discovered zero-day flaw that has already been used in real-world attacks. This marks the seventh actively exploited Chrome zero-day that Google has addressed since the beginning of the year.

The bug is classified as a high-severity issue involving an improper implementation in the V8 JavaScript engine. Google’s advisory confirms that an exploit for this vulnerability exists in the wild, though the company has withheld technical specifics for now to allow users time to update. As with previous zero-day patches, this update is rolling out to the stable desktop channel, covering Windows, macOS, and Linux users.

  • Affected: Google Chrome versions prior to the latest stable release for Windows, macOS, and Linux.
  • Fix: Update to the newest stable version, which contains the patch for CVE-2025-2783 (as referenced internally by Google’s security team).

Given the active exploitation, it is strongly recommended to restart your browser and apply the update immediately if you have not done so. Administrators should also consider enforcing automatic updates across managed devices to mitigate exposure.

Source: BleepingComputer

Has your organisation already enforced a mandatory Chrome update policy, or are you still relying on user-initiated restarts to patch this zero-day?

]]>https://xploitlk.com/topic/270/google-warns-of-new-chrome-zero-day-bug-exploited-in-attacksRSS for NodeSat, 12 Sep 2026 05:50:10 GMTWed, 09 Sep 2026 06:30:27 GMT60