Active Exploitation of Zero-Day Vulnerability in Google Chrome

Background

Google has released security updates to address a zero-day vulnerability (CVE-2025-5419) in its Chrome browser. 

Impact

Successful exploitation of the vulnerability could allow an attacker to execute arbitrary code on victims’ systems via out-of-bounds read and write operations in Chrome’s V8 JavaScript engine

Known Exploitation

This vulnerability is reportedly being actively exploited.

Affected Products

This vulnerability affects Google Chrome versions prior to 137.0.7151.68.

Mitigation

Users of Chrome browsers are advised to upgrade their browser to versions 137.0.7151.68/.69 for Windows and macOS, and version 137.0.7151.68 for Linux as soon as possible. 

Users are also encouraged to enable automatic updates in Chrome browser to ensure that their software is updated promptly.

References

https://chromereleases.googleblog.com/2025/06/stable-channel-update-for-desktop.html
https://thehackernews.com/2025/06/new-chrome-zero-day-actively-exploited.html
https://nvd.nist.gov/vuln/detail/CVE-2025-5419