Google has released an urgent security alert and an emergency update for its Chrome browser after discovering a critical vulnerability that is already being exploited by attackers. The flaw, identified as CVE-2025-10585, affects the V8 JavaScript engine and is being used in real-world attacks.
About the Vulnerability
The bug, a Type Confusion issue, was found by Google’s own Threat Analysis Group on September 16, 2025. Just 48 hours later, a fix was released. This type of flaw can confuse the browser about object types, which could allow attackers to execute malicious code, crash the browser, or even take complete control of a user's system.
Because the vulnerability is so severe and is actively being used in attacks, Google is not sharing technical details to prevent more attackers from using it.
How to Stay Safe
Users should immediately update their browsers to the latest version. The new versions are:
- Windows and macOS: 140.0.7339.185 or .186
- Linux: 140.0.7339.185
The update should install automatically, but you must restart your browser to complete the installation. You can check your version by going to chrome://settings/help in your address bar.
Other Patches and Broader Impact
This emergency update also fixes three other high-severity vulnerabilities, though none are known to be under active attack.
Since other browsers like Microsoft Edge are also built on the Chromium codebase, their users should expect similar security patches soon. Google is holding back full technical details until a majority of users are updated and any third-party libraries that use the same code can also be fixed.
Found this article interesting? Follow us on X(Twitter) ,Threads and FaceBook to read more exclusive content we post.
