Google patches actively exploited Chrome flaw

Google has released a security update for Chrome that fixes a vulnerability the company says was actively exploited. The update was pushed to the browser’s stable channel and should reach most users through automatic updates.

Users who disable automatic updates must update manually and restart Chrome to apply the patch. On desktop, open the menu, choose Help and then About Google Chrome to trigger an update check; the browser will download the new version and prompt for a relaunch. Android users can update via the Google Play Store. Chrome on iOS receives security fixes through iOS updates because Apple requires third-party browsers to use its WebKit engine.

Google declined to publish technical details while the update is still rolling out, a practice intended to limit further abuse. The company acknowledged the issue was reported and moved quickly to correct it.

Google’s vulnerability rewards program compensates external researchers who report bugs, and patches come from both internal teams and outside contributors.

Administrators who manage fleets of devices should deploy the update through enterprise patch-management tools and verify the new version is installed across workstations and mobile devices.

Security guidance recommends keeping browsers up to date, enabling automatic updates, avoiding unknown links and using endpoint protections on managed devices. Applying the Chrome update and restarting the browser will install the fix and mitigate exposure.