Vulnerability Details

CVE-2025-5419 is characterized as an out-of-bounds read and write issue within the V8 engine. Exploitation of this vulnerability could allow a remote attacker to corrupt the heap memory via a crafted HTML page, potentially leading to arbitrary code execution. Google’s Threat Analysis Group (TAG) researchers, Clement Lecigne and Benoît Sevens, discovered and reported the flaw on May 27, 2025. A fix was promptly implemented the following day through a configuration change to the Stable version of Chrome across all platforms.

As per Google’s advisory, “Google is aware that an exploit for CVE-2025-5419 exists in the wild.” However, specific details regarding the nature of the attacks or the threat actors involved have not been disclosed to prevent further exploitation

Recommended Actions

Users are strongly advised to update their Chrome browsers to the latest versions to mitigate potential risks:

• Windows and macOS: Version 137.0.7151.68 or 137.0.7151.69
• Linux: Version 137.0.7151.68

Additionally, users of Chromium-based browsers such as Microsoft Edge, Brave, Opera, and Vivaldi should apply the respective updates as they become available.

Context and Precedence

This marks the second actively exploited zero-day vulnerability in Chrome addressed by Google in 2025. Earlier this year, CVE-2025-2783 was patched after being weaponized in attacks targeting organizations in Russia.

The swift identification and remediation of CVE-2025-5419 underscore the importance of timely updates and vigilance in cybersecurity practices.

The post Google Issues Emergency Patch for Actively Exploited Chrome Zero-Day Vulnerability appeared first on CyberHood Sentinel.

Details of the Vulnerability

CVE-2025-2783 is described as an “incorrect handle provided in unspecified circumstances in Mojo on Windows.” Mojo is a set of runtime libraries facilitating platform-agnostic inter-process communication (IPC). The flaw allows attackers to bypass Chrome’s sandbox protections, enabling unauthorized access to the system.

Discovery and Exploitation

Researchers Boris Larin and Igor Kuznetsov from Kaspersky discovered and reported the vulnerability on March 20, 2025. The attacks, dubbed “Operation ForumTroll,” involved sophisticated phishing emails containing malicious links. Upon clicking these links, the victims’ systems were infected without any further action required. The phishing emails masqueraded as invitations from the organizers of the legitimate scientific forum, Primakov Readings, and targeted media outlets, educational institutions, and government organizations in Russia.

Google’s Response

In response to the active exploitation, Google released out-of-band fixes in Chrome version 134.0.6998.177/.178 for Windows. The company acknowledged the reports of the exploit in the wild but has not disclosed additional technical specifics about the attacks or the threat actors involved.

Recommendations for Users

Users of Chrome on Windows are strongly advised to update their browsers to the latest version immediately to mitigate potential threats. Additionally, users of Chromium-based browsers such as Microsoft Edge, Brave, Opera, and Vivaldi should apply the available fixes promptly. It is also recommended to exercise caution with unsolicited emails and avoid clicking on unknown links to prevent potential infections.

This incident underscores the critical importance of timely software updates and vigilance against phishing attempts to maintain cybersecurity.

The post Google Releases Urgent Chrome Update to Patch Actively Exploited Zero-Day Vulnerability appeared first on CyberHood Sentinel.