Use Chrome to surf the web and check your emails? You’d be wise to follow the latest advice from Google and make sure your settings are fully updated. The reason for this latest alert is due to a worrying bug that’s been found hiding inside this hugely popular application.
Of course, bugs are always being discovered, but what makes this latest alert more concerning is that the issue has been given the dreaded ‘zero-day’ rating.
So what does that mean, and why is it so worrying?
The zero-day stamp means hackers have spotted the glitch and are actively exploiting it in the wild. That’s why Google has rushed so quickly to fix things.
Explaining more, Google said: “Google is aware of reports that an exploit for CVE-2025-4664 exists in the wild.”
Once the patch is downloaded and installed, it will stop any future attacks taking place.
This latest Chrome problem was initially found by Vsevolod Kokorin – a security researcher at Solidlab – who confirmed the flaw could lead to an account takeover by cyber thieves.
Explaining more Kokorin said: “Query parameters can contain sensitive data – for example, in OAuth flows, this might lead to an Account Takeover. Developers rarely consider the possibility of stealing query parameters via an image from a 3rd-party resource.”
If you do use Chrome at your daily internet browser, it’s now vital to check you are running the very latest version. To do this, simply click on the word Chrome in the toolbar and head to “About Chrome”.
Here you’ll see what version is installed.
“The Stable channel has been updated to 136.0.7103.113/.114 for Windows, Mac and 136.0.7103.113 for Linux which will roll out over the coming days/weeks,” Google confirmed.
Most users are already seeing this update in their settings, so check now and reboot your browser without delay.