Cyber Security News

Chrome Security Update – Patch For 16 Vulnerabilities

Google has released a significant security update for its Chrome browser, addressing 16 vulnerabilities in version 132.0.6834.83/84 for Windows, Mac, and Linux platforms.

This update, which will be rolled out over the coming days and weeks.

While this security update includes several critical fixes and improvements to enhance the security of the web browser.

The update addresses five high-severity vulnerabilities:

  1. CVE-2025-0434: Out of bounds memory access in V8 ($7000 bounty)
  2. CVE-2025-0435: Inappropriate implementation in Navigation ($7000 bounty)
  3. CVE-2025-0436: Integer overflow in Skia ($3000 bounty)
  4. CVE-2025-0437: Out of bounds read in Metrics ($2000 bounty)
  5. CVE-2025-0438: Stack buffer overflow in Tracing (bounty to be determined)

Investigate Real-World Malicious Links, Malware & Phishing Attacks With ANY.RUN – Try for Free

Medium & Low-severity Vulnerabilities

The update also fixes several medium and low-severity vulnerabilities, including:-

  • Race condition in Frames
  • Inappropriate implementations in Fullscreen, Fenced Frames, and Payments
  • Insufficient data validation in Extensions

Here below we have mentioned all the medium and low-severity CVE IDs along with their severity:-

  • CVE-2025-0439 (Medium)
  • CVE-2025-0440 (Medium)
  • CVE-2025-0441 (Medium)
  • CVE-2025-0442 (Medium)
  • CVE-2025-0443 (Medium)
  • CVE-2025-0446 (Low)
  • CVE-2025-0447 (Low)
  • CVE-2025-0448 (Low)

Google acknowledges the contributions of external security researchers who reported these vulnerabilities.

The company awarded bounties ranging from $1000 to $7000 for the discovered issues, demonstrating its commitment to collaborating with the security community to improve Chrome’s safety.

In addition to addressing externally reported vulnerabilities, Google’s internal security team has implemented various fixes resulting from audits, fuzzing, and other initiatives.

The company employs advanced security tools such as AddressSanitizer, MemorySanitizer, and UndefinedBehaviorSanitizer to detect and prevent security bugs.

Users are encouraged to update their Chrome browsers to the latest version to benefit from these security patches.

The update will be automatically rolled out, but users can manually check for updates by navigating to Chrome’s settings and clicking on “About Chrome.”

This approach helps Google to protect users from potential exploitation of known and evolving vulnerabilities.

Find this News Interesting! Follow us on Google NewsLinkedIn, and X to Get Instant Updates!

Tushar Subhra

Tushar is a Cyber security content editor with a passion for creating captivating and informative content. With years of experience under his belt in Cyber Security, he is covering Cyber Security News, technology and other news.

Recent Posts

Ivanti Fully Patched Connect Secure RCE Vulnerability That Actively Exploited in the Wild

Ivanti has issued an urgent security advisory for CVE-2025-22457, a critical vulnerability impacting Ivanti Connect…

1 day ago

Beware! Weaponized Job Recruitment Emails Spreading BeaverTail and Tropidoor Malware

A concerning malware campaign was disclosed by the AhnLab Security Intelligence Center (ASEC), revealing how…

1 day ago

EncryptHub Ransomware Uncovered Through ChatGPT Use and OPSEC Failures

EncryptHub, a rapidly evolving cybercriminal entity, has come under intense scrutiny following revelations of operational…

1 day ago

PoisonSeed Targets CRM and Bulk Email Providers in New Supply Chain Phishing Attack

A sophisticated phishing campaign, dubbed "PoisonSeed," has been identified targeting customer relationship management (CRM) and…

1 day ago

Beware! Fake Unpaid Tolls Messages Used in Phishing Attack to Steal Login Credentials

A surge in phishing text messages claiming unpaid tolls has been linked to a massive…

1 day ago

State Bar of Texas Confirms Data Breach, Begins Notifying Affected Consumers

The State Bar of Texas has confirmed a data breach following the detection of unauthorized…

1 day ago