Recent searches
Search options
@Olly42@nerdculture.deGoogle fixes exploited Chrome Sandbox Bypass Zero-Day.
Google has released out-of-band fixes to address a high-severity security flaw in its Chrome browser for Windows that has been exploited in the wild as part of attacks targeting government organizations and journalists.
[CVE-2025-2783]
https://chromereleases.googleblog.com/2025/03/stable-channel-update-for-desktop_25.html
GIF
![[ImageSource: Google]
Google fixed the zero-day for users in the Stable Desktop channel, with patched versions rolling out worldwide to Windows (134.0.6998.178) users. Although the company says the security update will roll out over days and weeks, it was immediately to install the security patch soon as possible.
What to do?
⚠️If you’re a Windows and Chrome user and you have chosen to update your browser manually, now is the time to do it: close all Chrome windows on the desktop, then relaunch Chrome to apply the update. Users who prefer not to update Chrome manually can let the browser automatically check for new updates and install them after the next launch.⚠️
CVE-2025-2783 only affects Chrome users on Windows. Mac and Linux users won’t be receiving this update.
However, Kaspersky researchers who discovered the actively exploited zero-day also published a report with additional details, saying that attackers use CVE-2025-2783 exploits to bypass Chrome sandbox protections and infect targets with sophisticated malware.
<https://securelist.com/operation-forumtroll/115989/>](https://nerdculture.de/system/media_attachments/files/114/257/057/029/542/707/original/36d8189fcaa42163.jpeg "[ImageSource: Google]
Google fixed the zero-day for users in the Stable Desktop channel, with patched versions rolling out worldwide to Windows (134.0.6998.178) users. Although the company says the security update will roll out over days and weeks, it was immediately to install the security patch soon as possible.
What to do?
⚠️If you’re a Windows and Chrome user and you have chosen to update your browser manually, now is the time to do it: close all Chrome windows on the desktop, then relaunch Chrome to apply the update. Users who prefer not to update Chrome manually can let the browser automatically check for new updates and install them after the next launch.⚠️
CVE-2025-2783 only affects Chrome users on Windows. Mac and Linux users won’t be receiving this update.
However, Kaspersky researchers who discovered the actively exploited zero-day also published a report with additional details, saying that attackers use CVE-2025-2783 exploits to bypass Chrome sandbox protections and infect targets with sophisticated malware.
<https://securelist.com/operation-forumtroll/115989/>")