Update now! Chrome patches ‘high risk’ zero-day security flaw on PCs

Google has released Chrome version 134.0.6998.177/178 for Windows, while Chrome updates for macOS, Linux, and Android have yet to be announced. The security vulnerability closed by the update is apparently already being exploited by malicious actors. The makers of other Chromium-based browsers are likely to follow suit quickly.

In the Chrome Releases blog post, Srinivas Sista names the eliminated vulnerability CVE-2025-2783, which was discovered by external security researchers and reported to Google. Google classifies the vulnerability as high risk. It’s an exploitable bug in Mojo on Windows that occurs under unspecified circumstances. (Mojo is a collection of runtime libraries for inter-process communication.) The vulnerability was reported to Google on March 20th by Boris Larin and Igor Kuznetsov, who are security experts at Kaspersky.

According to Google, there are indications that this vulnerability is already being exploited for attacks in the wild. These indications are likely to have come from Larin and Kuznetsov, who presumably discovered the issue while analyzing malware attacks. It remains unclear who is attacking whom, but the attacks are apparently targeting Windows computers, as Google only provided this Chrome update for Windows.

A week ago, Google released a security update for Chrome that closed two other security vulnerabilities. Chrome usually updates itself automatically when a new version is available. You can trigger the update check manually using the menu item Help > About Google Chrome. Google plans to release Chrome 135 in the coming week.

The makers of other Chromium-based browsers are now required to follow suit with updates. Brave, Vivaldi, and Microsoft Edge should be updated with this security vulnerability fix later this week. Opera is still stuck on the outdated Chromium version 132.

All of this once again highlights the importance of having good security software on your PC. Vulnerabilities exist everywhere and attackers can exploit them before app developers like Google are even aware of them. Antivirus suites offer an additional layer of protection, so check out our recommended PC antivirus software if you aren’t using one.