Chrome Targeted by Active In-the-Wild Exploit Tied to Undisclosed High-Severity Flaw

Chrome maker Google has shipped security updates for its browser to fix three flaws, including one that is already under active exploitation in the wild. The vulnerability is being tracked under the Chromium issue tracker ID 466192044, with Google saying that an exploit for this flaw exists in the wild and that more details are “under coordination.” The company has also not disclosed the CVE identifier, affected component, or the flaw’s nature in public disclosures.

In total, Google’s update addresses eight zero‑day flaws that have been exploited or shown as PoC since the start of the year, along with two additional medium‑severity vulnerabilities (CVE-2025-14372 and CVE-2025-14373). To apply the fixes, users should update Chrome to versions 143.0.7499.109/110 for Windows and macOS, and 143.0.7499.109 for Linux, and those using other Chromium-based browsers are urged to apply the patches when available. According to Google, the details of the threat actor behind the attacks and the scale of the exploitation have not been disclosed.