Google has released a new update for Chrome on Windows, Mac and Linux platforms. Version 125 brings fixes for nine security vulnerabilities, including a serious "zero-day" flaw. Update your browser now to protect your device.
On Wednesday, Google released a new update for Chrome on Windows, Mac and Linux operating systems. While it's easy to ignore the update button, you shouldn't do that now.
Chrome version 125 contains patches for nine security vulnerabilities. Of particular concern is the vulnerability labeled CVE-2024-4947, which refers to "Type Confusion in V8". This bug happens when the code doesn't check the object passed to it, which allows attackers to execute their own code on your device.
What makes this vulnerability particularly dangerous is the fact that it is a "zero-day" flaw, meaning that it has already been actively exploited. This means that attackers are already aware of this vulnerability and have used it for hacking. When you come across a tag like this, you should update your apps immediately.
In addition to this, Google identified two other "zero-day" vulnerabilities affecting Chrome this month. The first, CVE-2024-4671, was patched on May 9, while the second, CVE-2024-4761, was patched on May 13. Both vulnerabilities allow attackers to access data they should not otherwise have access to.
The US Cyber Security and Infrastructure Agency (CISA) has added all three vulnerabilities to its catalog of known exploited vulnerabilities. Federal agencies have until June 10 to update their Chrome browsers, but you can do it now, LifeHacker reports.
How to update Google Chrome
To update Google Chrome, click the “Update” button if available. If not, click the three dots in the upper right corner of the window, then go to Help > About Google Chrome. Allow Chrome to check for updates, then follow the on-screen instructions to download and install the update.