Saturday, April 12, 2025
HomeCyber Security NewsChrome Security Update - Patch For 16 Vulnerabilities

Chrome Security Update – Patch For 16 Vulnerabilities

Published on

SIEM as a Service

Follow Us on Google News

Google has released a significant security update for its Chrome browser, addressing 16 vulnerabilities in version 132.0.6834.83/84 for Windows, Mac, and Linux platforms.

This update, which will be rolled out over the coming days and weeks.

While this security update includes several critical fixes and improvements to enhance the security of the web browser.

- Advertisement - Google News

The update addresses five high-severity vulnerabilities:

  1. CVE-2025-0434: Out of bounds memory access in V8 ($7000 bounty)
  2. CVE-2025-0435: Inappropriate implementation in Navigation ($7000 bounty)
  3. CVE-2025-0436: Integer overflow in Skia ($3000 bounty)
  4. CVE-2025-0437: Out of bounds read in Metrics ($2000 bounty)
  5. CVE-2025-0438: Stack buffer overflow in Tracing (bounty to be determined)

Investigate Real-World Malicious Links, Malware & Phishing Attacks With ANY.RUN – Try for Free

Medium & Low-severity Vulnerabilities

The update also fixes several medium and low-severity vulnerabilities, including:-

  • Race condition in Frames
  • Inappropriate implementations in Fullscreen, Fenced Frames, and Payments
  • Insufficient data validation in Extensions

Here below we have mentioned all the medium and low-severity CVE IDs along with their severity:-

  • CVE-2025-0439 (Medium)
  • CVE-2025-0440 (Medium)
  • CVE-2025-0441 (Medium)
  • CVE-2025-0442 (Medium)
  • CVE-2025-0443 (Medium)
  • CVE-2025-0446 (Low)
  • CVE-2025-0447 (Low)
  • CVE-2025-0448 (Low)

Google acknowledges the contributions of external security researchers who reported these vulnerabilities.

The company awarded bounties ranging from $1000 to $7000 for the discovered issues, demonstrating its commitment to collaborating with the security community to improve Chrome’s safety.

In addition to addressing externally reported vulnerabilities, Google’s internal security team has implemented various fixes resulting from audits, fuzzing, and other initiatives.

The company employs advanced security tools such as AddressSanitizer, MemorySanitizer, and UndefinedBehaviorSanitizer to detect and prevent security bugs.

Users are encouraged to update their Chrome browsers to the latest version to benefit from these security patches.

The update will be automatically rolled out, but users can manually check for updates by navigating to Chrome’s settings and clicking on “About Chrome.”

This approach helps Google to protect users from potential exploitation of known and evolving vulnerabilities.

Find this News Interesting! Follow us on Google NewsLinkedIn, and X to Get Instant Updates!

Tushar Subhra
Tushar Subhra
Tushar is a Cyber security content editor with a passion for creating captivating and informative content. With years of experience under his belt in Cyber Security, he is covering Cyber Security News, technology and other news.

Latest articles

Dangling DNS Attack Allows Hackers to Take Over Organization’s Subdomain

Hackers are exploiting what's known as "Dangling DNS" records to take over corporate subdomains,...

HelloKitty Ransomware Returns, Launching Attacks on Windows, Linux, and ESXi Environments

Security researchers and cybersecurity experts have recently uncovered new variants of the notorious HelloKitty...

RansomHub Ransomware Group Hits 84 Organizations as New Threat Actors Emerge

The RansomHub ransomware group has emerged as a significant danger, targeting a wide array...

Threat Actors Leverage Email Bombing to Evade Security Tools and Conceal Malicious Activity

Threat actors are increasingly using email bombing to bypass security protocols and facilitate further...

Resilience at Scale

Why Application Security is Non-Negotiable

The resilience of your digital infrastructure directly impacts your ability to scale. And yet, application security remains a critical weak link for most organizations.

Application Security is no longer just a defensive play—it’s the cornerstone of cyber resilience and sustainable growth. In this webinar, Karthik Krishnamoorthy (CTO of Indusface) and Phani Deepak Akella (VP of Marketing – Indusface), will share how AI-powered application security can help organizations build resilience by

Discussion points


Protecting at internet scale using AI and behavioral-based DDoS & bot mitigation.
Autonomously discovering external assets and remediating vulnerabilities within 72 hours, enabling secure, confident scaling.
Ensuring 100% application availability through platforms architected for failure resilience.
Eliminating silos with real-time correlation between attack surface and active threats for rapid, accurate mitigation

More like this

Dangling DNS Attack Allows Hackers to Take Over Organization’s Subdomain

Hackers are exploiting what's known as "Dangling DNS" records to take over corporate subdomains,...

HelloKitty Ransomware Returns, Launching Attacks on Windows, Linux, and ESXi Environments

Security researchers and cybersecurity experts have recently uncovered new variants of the notorious HelloKitty...

RansomHub Ransomware Group Hits 84 Organizations as New Threat Actors Emerge

The RansomHub ransomware group has emerged as a significant danger, targeting a wide array...