Chrome users, you know the drill. Yet another zero-day exploit for Google’s browser giant has been patched, and you need to go update your browser now. Google said the latest zero-day — the sixth announced and patched so far in 2025 — has an active exploit “in the wild,” though it’s not clear if it’s being used widely. The vulnerability is public knowledge and therefore critical.
Google has labeled the issue CVE-2025-10585, and pushed out a fix to the stable desktop builds (Windows, Mac, Linux) just two days after it was reported to the Threat Analysis Group. As Bleeping Computer reports , the issue stems from a type confusion issue in the JavaScript engine. This kind of vulnerability has been exploited multiple times before for Chrome and other browsers. Three other high-level vuln