Google warns of new Chrome zero-day bug exploited in attacks
-
Google has shipped a substantial patch batch for Chrome, resolving 230 security issues on Tuesday. Among them is a critical fix for a newly discovered zero-day flaw that has already been used in real-world attacks. This marks the seventh actively exploited Chrome zero-day that Google has addressed since the beginning of the year.
The bug is classified as a high-severity issue involving an improper implementation in the V8 JavaScript engine. Google’s advisory confirms that an exploit for this vulnerability exists in the wild, though the company has withheld technical specifics for now to allow users time to update. As with previous zero-day patches, this update is rolling out to the stable desktop channel, covering Windows, macOS, and Linux users.
- Affected: Google Chrome versions prior to the latest stable release for Windows, macOS, and Linux.
- Fix: Update to the newest stable version, which contains the patch for CVE-2025-2783 (as referenced internally by Google’s security team).
Given the active exploitation, it is strongly recommended to restart your browser and apply the update immediately if you have not done so. Administrators should also consider enforcing automatic updates across managed devices to mitigate exposure.
Source: BleepingComputer
Has your organisation already enforced a mandatory Chrome update policy, or are you still relying on user-initiated restarts to patch this zero-day?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login