Critical Chrome Flaw Allowed Data Theft & Unauthorized Access

Google has released an urgent security update for its Chrome browser after two critical vulnerabilities were found, putting users at risk of data theft and unauthorized access.

These vulnerabilities, labeled as CVE-2025-3619 and CVE-2025-3620, impact versions of Chrome before 135.0.7049.95/.96 on Windows and Mac, and 135.0.7049.95 on Linux. The update is being rolled out globally in the coming days.

Critical Chrome Vulnerabilities

The more severe vulnerability, CVE-2025-3619, is a heap buffer overflow in Chrome’s Codecs component. This flaw allows attackers to exploit how Chrome handles certain media files, potentially executing malicious code and leading to full system compromise and data theft.

CVE-2025-3620 is a security flaw in USB component. It’s a “use-after-free” vulnerability that could let hackers run malicious code or access your system.

This is especially dangerous because attackers can exploit it remotely—just by getting the user to visit a malicious website or interact with harmful content.

If exploited, hackers could steal passwords, financial data, and other sensitive information, or even take full control of your device.

These vulnerabilities affect all users with outdated versions of Google Chrome on desktop computers, including individuals, businesses, and government organizations.

If you store personal information, passwords, or credit card details in Chrome, it’s crucial to update your browser right away to protect against identity theft and fraud.

Patch – Update Now!

Google has released a fix for critical vulnerabilities in Chrome with the following updates:

Version 135.0.7049.95/.96 for Windows and Mac.
Version 135.0.7049.95 for Linux.

Google has temporarily limited access to detailed bug information to protect users. The vulnerabilities were discovered by security researchers Elias Hohl and @retsew0x01, and Google’s internal security tools played a key role in detecting and addressing the issues early.

How to Update:

Open Chrome and click the three-dot menu in the top-right corner.
Go to Help > About Google Chrome.
Chrome will automatically check for updates and install the latest version.
Restart Chrome to complete the update.

Why Update?

Though there’s no evidence of active exploitation, unpatched systems are still at high risk.
Regular browser updates are essential to protect against evolving security threats and avoid data breaches or system compromise.

Stay safe by updating Chrome today!