Google Raises Alarm: Critical Chrome Vulnerability Exploited in Attacks

Google has issued an urgent security update for the Chrome browser following the revelation of a serious vulnerability that has already been exploited in active attacks, according to Forbes. The security hole, CVE-2025-5419, is located in the browser’s V8 JavaScript engine and allows attackers to manipulate memory, potentially leading to remote execution of malicious code.

It is Google’s own Threat Analysis Group that identified the exploitation. To minimize the risk of further attacks, a configuration change was implemented on May 28.

“We are aware that an exploitation of CVE-2025-5419 is in circulation, and therefore we are restricting access to details until the vast majority of users have installed the update,” Google states.

Although the flaw is categorized as “high” rather than “critical,” experts emphasize the importance of updating the browser immediately, as real attacks are already underway.

The U.S. NIST warns that the vulnerability can be used to exploit memory via specially crafted HTML pages, meaning that any unsuspecting user could be a click away from being compromised.

Our team may have used AI to assist in the creation of this content, which has been reviewed by our editors.