Google has recently rolled out a critical update for Chrome, addressing a significant bug that has been identified in the browser. This latest release is crucial for users to install promptly, as the issue has been classified as a zero-day vulnerability, indicating that malicious actors are actively exploiting it.
In response to the situation, Google has acted swiftly to rectify the flaw. According to a security advisory issued by Google on Wednesday, there are reports of an exploit for CVE-2025-4664 circulating in the wild. The security researcher Vsevolod Kokorin from Solidlab first identified the vulnerability, highlighting the potential risk of cyber thieves exploiting it for an account takeover.
Kokorin elaborated on the severity of the flaw, emphasizing that sensitive data could be exposed through query parameters, potentially leading to an Account Takeover, particularly in OAuth flows. The researcher pointed out that developers often overlook the possibility of query parameters being stolen via an image from a third-party source.
To safeguard against potential security threats, Chrome users are urged to ensure they are running the most up-to-date version of the browser. Google has confirmed the release of version 136.0.7103.113/.114 for Windows and Mac, and 136.0.7103.113 for Linux, with updates scheduled to be rolled out gradually. Users are advised to check for the update in their browser settings and promptly reboot to apply the necessary security patches.
