Another Chrome zero-day under attack: Update now

Google issued an extra patch for a security vulnerability in Chrome that is being actively exploited, urging users to update. The patch fixes two flaws in Chrome’s V8 engine, and for one of them Google says an exploit already exists in the wild. Both issues are described as “type confusion” vulnerabilities in the V8 JavaScript engine, which can lead to attackers running code remotely through crafted JavaScript on a malicious website.

The latest update, covering CVE-2025-13223 reported by Google’s Threat Analysis Group (TAG), comes as Chrome has seen at least seven zero-days exploited in 2025, with several tied to V8 and espionage operations against targets.

The current advisories list the latest Windows, Linux, and macOS version numbers as 144.0.7444.175 or later for Windows, 144.0.7444.175 for Linux, and 144.0.7444.176 for macOS, and Malwarebytes stresses updating promptly to reduce risk while noting that attackers often exploit unpatched browsers before many users update. According to Google’s Threat Analysis Group (TAG).