Google Chrome Urgently Patches High-Risk Vulnerability Under 'Active Attack'

Google updated the Chrome desktop browser Stable channel to version 143, fixing 3 security defects including a high-risk security vulnerability already being exploited in actual attacks -- a significant immediate security response for Chrome users worldwide. Update details: Chrome Stable channel updated to 143.0.7499.109 and 143.0.7499.110 on Windows and macOS; 143.0.7499.109 on Linux (December 10, 2025, local time); distribution over several days to weeks. Core vulnerability: CVE-2025-14174 -- classified as high-risk; out-of-bounds memory access in Chrome graphics processing layer ANGLE component; jointly reported by Apple Security Engineering and Architecture (SEAR) and Google Threat Analysis Group (TAG). Google confirmed this vulnerability is "already being exploited in actual attacks" -- rare public disclosure of active zero-day exploitation. Additional fixes: two medium-risk vulnerabilities also addressed in this update batch. The ANGLE component significance: ANGLE (Almost Native Graphics Layer Engine) is Chrome graphics abstraction layer enabling WebGL and hardware-accelerated rendering across platforms; memory vulnerabilities in this component can potentially enable remote code execution via malicious web content. User action required: Chrome auto-updates but users should verify they are running version 143+ by checking chrome://settings/help; the "actively exploited" designation means patching should not be delayed.