As threat actors continue to target Google users with a blitz of attacks ranging from AI-powered scams, backdoor malware, and zero-day Android smartphone hacks, it’s more critical than ever to take heed of warnings when security issues in Google products and services are discovered. Take the case of the Chrome web browser which, according to Google itself, has been found susceptible to five new security vulnerabilities. While Google has issued a security update for Chrome users across the Windows, Mac and Linux platforms, with Android no doubt soon to follow, simply sitting back and waiting for this to roll out is not advised. But even if you take action to kickstart the update process right now, you still won’t be protected from attack unless you do one extremely important thing. Here’s what you need to know and do.
Chrome Security Update—Five New Vulnerabilities Confirmed
A new security update for users of the Chrome web browser across desktop platforms has been confirmed by Google, with fixes for three high-severity and two medium-severity Common Vulnerabilities and Exposures included. Although full access to technical details relating to these bugs have not been released, nor will they be until a majority of users have had time to apply the security patch being rolled by Google across the coming days and weeks, here’s what we do know about the CVEs in question.
High-severity security vulnerabilities:
CVE-2025-1920 and CVE-2025-2135 are both type confusion issues in the Chrome V8 Javascript rendering engine, while a third that is awaiting a CVE designation is an out of bounds memory write issue with the Chrome GPU.
Medium-severity security vulnerabilities:
CVE-2025-2136 is a use after free memory issues in Chrome’s inspector component and CVE-2025-2137 an out of bounds memory read issue in V8.
Do This One Thing Or Your Chrome Browser Security Update Won’t Protect You
Obviously you need to ensure that you update your Chrome browser to the latest, secure, version. In the case of Windows and Mac platforms that means version 134.0.6998.88/.89, while for Linux users it is 134.0.6998.88. Although an automatic update will reach you eventually, it is always advised to kickstart the process yourself to get protected from any potential attacks as soon as possible. Simply heading for the About option in your Chrome browser settings to check for, and start, the update process is not, however, the one critical thing you need to ensure you do to stay safe. Rather, what I’m referring to here is hitting the relaunch button once the download and install have completed. This is required in order to enable the update and get that protection working for you. You know what to do.
