Patch Now: Google Fixed Actively Exploited Chrome Zero-Day in December 2025 Update

Share:

Google has released emergency security update for the Chrome browser addressing three vulnerabilities, including an actively exploited zero-day flaw (ID: 466192044). This update, version 143.0.7499.108/.109/.110, is now rolling out to Windows, macOS, Linux, Android, and iOS users. The patch aims to protect users against ongoing exploitation campaigns observed in the wild.

Severity: High

Update Information

  • Version: Chrome 143.0.7499.109/.110 (Windows/Mac), 143.0.7499.109 (Linux), 143.0.7499.109 (Android), 143.0.7499.108 (iOS)
  • Release Date: December 10, 2025
  • Scope: Desktop, Android, and iOS stable channel

Vulnerabilities Addressed

CVE / IDSeverityComponentDescription
466192044High (Zero-Day)UndisclosedUnder active exploitation, details restricted pending majority patch rollout
CVE-2025-14372MediumPassword ManagerUse-after-free vulnerability that could lead to memory corruption or remote code execution
CVE-2025-14373MediumToolbarInappropriate implementation flaw possibly allowing privilege escalation or data exposure
  • Google confirmed that exploit activity targeting the high-severity zero-day (466192044) has been observed in the wild, prompting an accelerated release of this patch.
  • The zero-day likely involves a memory corruption or use-after-free bug, consistent with recent Chrome exploit trends.
  • Details remain restricted under coordinated disclosure, but attackers were already exploiting this vulnerability prior to the patch release.

Recommendations

  1. Update Chrome browser on Windows, macOS, Linux, Android, and iOS to the latest version.
  2. Ensure Microsoft Edge and other Chromium based browsers are running latest security updates.
  3. Enforce auto-updates for Chrome and Edge browsers in enterprise environments.
  4. Enable Enhanced Safe Browsing mode for real-time protection.

Source:

Enjoyed reading this Threat Intelligence Advisory? Stay updated with our latest exclusive content by following us on Twitter and LinkedIn

No related posts found.

Ampcus Cyber
Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.

Contact Us