Urgent: Google Patches Actively Exploited Chrome Zero-Day (CVE-2025-10585)

Hey, You! Yes, You! Update Your Chrome. Right Now

If you're reading this article in Google Chrome, we have a quick but very important task for you: stop for a moment and make sure you're running the latest version. This is not a drill. Google has just confirmed that attackers are actively exploiting a critical vulnerability, CVE-2025-10585, and your data could be at risk.

What Is This Vulnerability, and Why Is It So Dangerous?

Google's own Threat Analysis Group found the flaw. It sits at the heart of the browser, in the V8 engine that runs JavaScript. It's a "type confusion" bug. Put simply, a clever attacker can trick the browser into misreading what type of data it's processing.

The consequences? They range from a harmless browser crash to an attacker taking full control of your computer. Visiting a specially crafted website could be enough to let an attacker run arbitrary code on your device. It sounds like a movie plot, but unfortunately it's our digital reality.

Zero-Day: A Race Against Time

"Zero-day" means the vulnerability became known at the same moment cybercriminals started exploiting it. To learn more about how zero-day vulnerabilities work and the market for them, see our comprehensive guide to 0-day vulnerabilities. Google moved fast and released a patch just 48 hours after the issue was reported. Now it's your move.

To protect yourself, update your browser to version:

• 140.0.7339.185/.186 for Windows and macOS
• 140.0.7339.185 for Linux

Restarting the browser is usually enough. Go to Settings -> About Chrome, and the browser will check for updates on its own. Don't put it off: online, seconds can decide whether you stay safe.

Sources: The Cyber Express, Check Point Research