Google has patched another urgent security flaw in Chrome – so update now or be at risk

• Google’s TAG team finds high-severity bug in Chrome V8
• The bug allows threat actors to run arbitrary code on endpoints
• It is being actively exploited, so users should patch now

Google has fixed a high-severity Chrome vulnerability which was allegedly being exploited in the wild, possibly by nation-state threat actors.

In a new security bulletin, Google said it addressed a type confusion issue in Chrome V8, tracked as CVE-2025-6554, which allowed threat actors to perform arbitrary read/write operations, potentially giving way to sensitive data theft, token exfiltration, or even malware and ransomware deployment.