Morocco’s cyber defense authority warned Thursday that users of Google’s Chrome web browser should install an immediate security update after the company patched several critical vulnerabilities — including a zero-day flaw already used in targeted attacks.
The Directorate General of Information Systems Security, part of the country’s National Defense Administration, said in a high-severity advisory that Google released an urgent update Sept. 17 to fix four critical security holes. One of them, tracked as CVE-2025-10585, is a zero-day vulnerability in Chrome’s V8 JavaScript engine that has been exploited in active attacks, the agency said.
“If a user is convinced to visit a specially crafted web page, an attacker could run malicious code remotely and gain full control of the affected system,” the agency said in the advisory, summarizing the risk posed by the V8 flaw.
The bulletin also listed three other critical defects — CVE-2025-10501, CVE-2025-10500 and CVE-2025-10502 — and urged users to consult Google’s security note for additional information and remediation steps.
Security researchers say a “zero-day” is a previously unknown vulnerability that can be exploited before developers have had any time to release a fix. Because attackers can use such flaws immediately, officials and experts typically advise rapid patching.
Google did not immediately respond to a request for comment Thursday. The Moroccan agency recommended that Chrome users update their browsers to the latest version without delay to reduce the risk of compromise.
add your comment
Terms of publication : Not to offend the writer, people, sacred things, or attack religions or the divine self, and refrain from racist incitement and insults.