Google had to issue an emergency update for the Chrome browser after discovering a security vulnerability of one of the most dangerous types, known as a "zero-day vulnerability," which has already been exploited by hackers.
The researcher Salvatore Gulizia discovered the vulnerability in the browser used by around 3.6 billion people worldwide and reported it to Google.
This type of vulnerability is particularly concerning because it was previously unknown to software developers, meaning there is no protection against it.
The update for Windows, Mac, and Linux 12 includes a security fix for the vulnerability coded CVE-2026-85046, and Google did not provide specific details about it to allow users time to update their browsers.
Google stated in a notice regarding the issue: "Google is aware that the CVE-2026-85046 vulnerability is already being exploited," adding that "access to details of the vulnerability and links may remain restricted until the majority of users are updated with the fix."
The security issue can be exploited by enticing someone to visit an HTML page containing malicious code, which may give attackers control over the infected tab, allowing them to crash the system, execute harmful code, or steal sensitive data.
Google did not provide details on who is exploiting the vulnerability, the number of victims, or the targeted entities.
Earlier this year, researchers from Google's Threat Intelligence Group discovered the first evidence of hackers using artificial intelligence to create a zero-day vulnerability.
The researchers wrote in a report in May: "For the first time, the group identified a threat actor using a zero-day exploit that we believe was developed using artificial intelligence. The criminal scheme intended to use it in a widespread exploitation event, but our proactive discovery may have prevented its use."
Google advised Chrome users to protect themselves from the latest zero-day exploit by updating their browser through the settings, then selecting "About Chrome" and installing any available updates.