Chrome emergency update: flaw already exploited in the wild

Google has released an unscheduled security update for Chrome, and the reason is an uncomfortable one: at least one of the patched vulnerabilities was already being exploited in real-world attacks before the fix shipped — a classic zero-day.

If you use Chrome or any Chromium-based browser such as Edge, Brave or Vivaldi, don’t postpone this update. Chrome usually updates itself, but the new version only takes effect after a browser restart. A quick look at Settings → About Chrome tells you whether the fix has landed.

For the Chromium derivatives it’s worth checking again over the next few days, since their vendors need to merge the fixes first.