Google Issues Emergency Update For All Chrome Users—Attacks Underway
Update Chrome now.
Jaap Arriens/NurPhoto
Microsoft has just told Windows users to ditch Chrome to “browse securely” with Edge. And now Google warns that Chrome is under attack, issuing an emergency update and a recommendation to upgrade all desktop browsers immediately.
Google warns “that an exploit for CVE-2025-10585 exists in the wild.” The vulnerability is a Type Confusion flaw in V8, Chrome’s underlying Java engine. This opens a door for attackers to destabilize the browser or system its running on, to execute their own code.
The threat was reported by Google’s own Threat Analysis Group just 48 hours ago — that means this is very much an emergency update and you need to install and restart. You need to make sure you update your PC/Mac to version 140.0.7339.185/.186.
The update will download to your device automatically. You will then see the usual flag to restart, do that as soon as you can to enable the download to install. Your tabs will reopen, excerpt for private “incognito” tabs which will not.
The zero-day is one of four fixes in this update, all of which are high-severity:
- CVE-2025-10585: Type Confusion in V8. Reported by Google Threat Analysis Group on 2025-09-16
- CVE-2025-10500: Use after free in Dawn. Reported by Giunash (Gyujeong Jin) on 2025-08-03
- High CVE-2025-10501: Use after free in WebRTC. Reported by sherkito on 2025-08-23
- High CVE-2025-10502: Heap buffer overflow in ANGLE. Reported by Google Big Sleep on 2025-08-12
Google gives the usual note that “access to bug details and links may be kept restricted until a majority of users are updated with a fix.” We can expect more details in the coming weeks, albeit it will be highly targeted given how it was disclosed.
Google also says “we will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven’t yet fixed.”
Chrome and Edge run on the same Chromium base. As such, you can expect Edge and other browsers to issue updates as well within the coming hours. Microsoft may have warned users to ditch Chrome for Edge, but there’s very little between them.