GOOGLE Chrome users are being urged to update their browsers immediately after the tech giant revealed a critical zero-day vulnerability that is already being exploited by cybercriminals.
The flaw, identified as CVE-2025-4664, affects multiple platforms including Windows, macOS, and Linux, and may allow hackers to hijack devices or take over user accounts, according to security researchers and Google’s security bulletin.
What’s the Risk?
The vulnerability, discovered by Vsevolod Kokorin of cybersecurity firm Solidlab, could allow attackers to execute malicious code or hijack systems via crafted content viewed in the browser. As a zero-day exploit, it’s actively being used in the wild, prompting Google to act fast.
“Google is aware of reports that an exploit for CVE-2025-4664 exists in the wild,” the company stated in an official blog post on May 17.
How to Stay Safe
Google has released an urgent update for Chrome users:
- Windows & macOS: Version 136.0.7103.113/.114
- Linux: Version 136.0.7103.113
Users must restart Chrome to activate the update. To check your version:
- Open Chrome
- Click the three-dot menu > Help > About Google Chrome
- Chrome will auto-check and install updates
- Restart the browser to complete
Failure to do so may leave your system vulnerable to hijack attempts or malware injections.
Related Warnings from Google
The update comes just hours after Google issued a separate account safety alert urging users to check their settings or risk permanent data loss—particularly related to Google Maps Timeline.
The popular feature, which tracks and saves your location history, is moving from the cloud to on-device storage. Any data not migrated by the May 18 deadline will be permanently deleted.
“Timeline helps you remember places you’ve visited—if you want to keep that data, act now,” said a Google spokesperson.
Cybersecurity Context
Zero-day vulnerabilities are highly prized by hackers because they are unknown to the software vendor until actively exploited. The UK’s National Cyber Security Centre (NCSC) recommends that users and businesses prioritise browser and OS updates to mitigate risks.
Cybercrime trends show that browsers are increasingly targeted due to their role in handling credentials, payment gateways, and private sessions.
Social Media Response
On X (formerly Twitter), users expressed alarm:
“Hijack risk on Chrome?! Just updated – thanks for the heads-up,” posted @TechRadarUK.
“This is why I keep auto-updates on. Don’t wait to get hacked,” wrote @InfosecDaily.
Bottom Line
If you use Google Chrome as your primary browser, updating to the latest version is not just a recommendation—it’s a cybersecurity imperative.
