Google Releases Emergency Security Patch For Actively Exploited Chrome Zero-Day Vulnerability

Google released emergency (out-of-band) updates for its Chrome browser to address three security vulnerabilities—one of which is currently being actively exploited.

The most critical of the flaws is tracked as CVE-2025-5419 (CVSS score: 8.8). It is a high-severity out-of-bounds read and write vulnerability in Chrome’s V8 JavaScript and WebAssembly engine. It was reported last week by Clement Lecigne and Benoît Sevens from Google’s Threat Analysis Group (TAG).