Google releases urgent patch for Chrome, fixes actively exploited flaw
Take action: Once again - an urgent patch for Chrome - Google is patching an actively exploited flaw in Chrome, and exploitation is just a visit to a malicious site. DONT WAIT! Update all your Chrome and Chromium browsers (Edge, Opera, Brave, Vivaldi...). Updating the browser is easy, all your tabs reopen after the patch.
Learn More
Google has released an urgent security update for its Chrome web browser addressing six security vulnerabilities, including a critical zero-day flaw that is being actively exploited in the wild.
Vulnerability summary (high severity flaws)
- CVE-2025-6558 (CVSS score 8.8) - Incorrect validation of untrusted input in ANGLE and GPU: A critical sandbox escape vulnerability that allows remote attackers to break out of Chrome's security boundaries through malicious web pages. Actively exploited in the wild.
- CVE-2025-7656 (CVSS score 8.8) - Integer overflow in V8: A mathematical overflow vulnerability in Chrome's JavaScript engine that could lead to memory corruption and potential code execution.
- CVE-2025-7657 (CVSS score 8.8) - Use after free in WebRTC (High severity): A memory management vulnerability in Chrome's real-time communication components that could enable remote code execution.
Google's Threat Analysis Group (TAG) discovered CVE-2025-6558 on June 23, 2025. The involvement of TAG, which specializes in tracking nation-state cyber activities, suggests potential targeting by advanced persistent threat groups or state-sponsored actors.
All versions of Google Chrome prior to 138.0.7204.157/.158 are vulnerable to these security flaws. Users should immediately update their browsers to the latest version to protect against active exploitation. The update process can be initiated by navigating to Chrome's menu (three dots) > Help > About Google Chrome, which will automatically check for and install available updates.
