GOOGLE Chrome users are being urged to update their browsers immediately after the tech giant revealed a critical zero-day vulnerability that is already being exploited by cybercriminals.
The flaw, identified as CVE-2025-4664, affects multiple platforms including Windows, macOS, and Linux, and may allow hackers to hijack devices or take over user accounts, according to security researchers and Google’s security bulletin.
What’s the Risk?
The vulnerability, discovered by Vsevolod Kokorin of cybersecurity firm Solidlab, could allow attackers to execute malicious code or hijack systems via crafted content viewed in the browser. As a zero-day exploit, it’s actively being used in the wild, prompting Google to act fast.
“Google is aware of reports that an exploit for CVE-2025-4664 exists in the wild,” the company stated in an official blog post on May 17.
How to Stay Safe
Google has released an urgent update for Chrome users:
- Windows & macOS: Version 136.0.7103.113/.114
- Linux: Version 136.0.7103.113
Users must restart Chrome to activate the update. To check your version:
- Open Chrome
- Click the three-dot menu > Help > About Google Chrome
- Chrome will auto-check and install updates
- Restart the browser to complete
Failure to do so may leave your system vulnerable to hijack attempts or malware injections.
Related Warnings from Google
The update comes just hours after Google issued a separate account safety alert urging users to check their settings or risk permanent data loss—particularly related to Google Maps Timeline.