Google has released a new critical update for Chrome that you should install as soon as possible if you don't want to put your personal data at risk. This is version 138 of the world's most used browser, and it comes with a clear warning: it fixes a vulnerability that is already being exploited by cybercriminals. If you're a Chrome user, this patch isn't optional; it's a priority that you should install as soon as possible.
The company has officially acknowledged that this security flaw, registered as CVE-2025-6558, is active in the real world and directly affects the validation of untrusted input in the ANGLE and GPU components. In other words, this means that attackers could exploit this vulnerability to perform malicious actions without your consent, simply by visiting a compromised website.
That's why Google has acted quickly, especially given that AI-powered browsers are rapidly emerging.
Although Google hasn't provided technical details to prevent other malicious users from copying the attack method, it has classified this vulnerability as critical and confirms that there is already evidence of it being used in real-world scenarios. This isn't a proof of concept or a hypothesis, but a real problem that could affect you right now if you use Chrome on your computer or mobile device.
To address the issue, Google has released a new version of the browser that is gradually rolling out to all users. On Windows or macOS computers, users should check that they have version 138.0.7204.157 or 138.0.7204.158, while on Linux, the correct version is 138.0.7204.157. To ensure your computer is protected against these potential attacks, you should manually force a browser update.
To do this:
-
Open Google Chrome.
-
Tap the three dots in the top right corner,
-
Select “Help” and then “About Google Chrome”.
The browser will automatically check for the latest available version and, if an update is pending, it will install it immediately. However, you'll need to restart the browser for the changes to take effect.
If you're using Chrome on Windows and want to update from the command line, you can use the following command:
winget upgrade google.chrome.exe
This will force the new version to be downloaded and installed immediately from the terminal.