Active Exploitation of Zero-Day Vulnerability in Google Chrome

Background

Google has released security updates addressing a zero-day vulnerability (CVE-2025-10585) in their Chrome browser. 

Impact

Successful exploitation of the type confusion weakness in Google Chrome's V8 JavaScript could allow an attacker to perform arbitrary code execution or crash the browser.

Affected Products

This vulnerability affects versions of Google Chrome prior to 140.0.7339.185/.186 on Windows and macOS, and 140.0.7339.185 on Linux.

Known Exploitation

This vulnerability is reportedly being exploited in the wild.

Mitigation

Users of Chrome browsers are advised to upgrade their browser to the latest versions.

Users are also encouraged to enable automatic updates in Chrome browser to ensure that their software is updated promptly.

References 

https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_17.html?m=1

https://cybersecuritynews.com/google-chrome-0-day-vulnerability-exploited/

https://www.bleepingcomputer.com/news/security/google-patches-sixth-chrome-zero-day-exploited-in-attacks-this-year/

https://securityaffairs.com/182322/uncategorized/cve-2025-10585-is-the-sixth-actively-exploited-chrome-zero-day-patched-by-google-in-2025.html