Google fixed a new actively exploited Chrome zero-day

Google fixed a new actively exploited Chrome zero-day, and Google released security updates to address three Chrome vulnerabilities, including a high-severity flaw that threat actors are already exploiting in the wild, according to Google. The high-severity issue was tracked as Chromium issue 466192044 and is tied to the ANGLE graphics library, specifically its Metal renderer, where buffer sizes could be miscalculated and cause memory corruption.

Google also patched two Medium vulnerabilities, CVE-2025-14372 and CVE-2025-14373, in the Password Manager and Toolbar respectively. This year, Google addressed seven other zero-day vulnerabilities actively exploited in the wild, and Chrome Stable has been updated to 143.0.7499.109/.110 for Windows/macOS and 143.0.7499.109 for Linux, with rollout over the next days.

The advisory notes that an exploit for 466192044 exists in the wild, and the report includes several CVEs across the V8 JavaScript and WebAssembly engine as actively exploited in real-world attacks.