Google Issues Emergency Chrome Update As Zero-Day Flaw Puts Billions At Risk
Google Issues Emergency Chrome Update As Zero-Day Flaw Puts Billions At Risk
CERT-In warns users to update immediately as attackers actively exploit a major Chrome security bug.
Google has rolled out an emergency patch for Chrome after detecting a dangerous vulnerability that is already being exploited online. The flaw, tracked as CVE-2025-13223, affects Chrome’s V8 JavaScript engine and stems from a “type confusion” error — a memory-handling failure that can let harmful websites execute unwanted code or crash the browser.
The company confirmed that attackers have begun using the bug in real-world scenarios, prompting a global alert urging all Chrome users to update without delay. The fix has been pushed to Windows, macOS and Linux, but devices remain exposed until manually updated.
India’s central cybersecurity agency CERT-In has also issued a high-risk advisory, warning that these vulnerabilities allow remote attackers to run arbitrary code and potentially take full control of a system. It flagged that a crafted HTML page could trigger heap corruption inside Chrome’s JavaScript engine, opening the door to serious data and device compromise.
Google has withheld detailed technical information until most users receive the patch, hoping to prevent further exploitation. However, it has cautioned that browsers built on Chromium — including popular third-party options — may carry the same risk until their developers push updates.
The warning is particularly relevant in India, where Chrome dominates personal, office and shared computer use across schools and businesses. Experts advise avoiding unfamiliar websites or suspicious links until the security update is installed.
Users are urged to check Chrome’s settings and ensure their browser is updated to the latest stable version to stay protected.
Disclaimer: This article provides general cyber-safety information and should not be taken as professional security advice.
