MS-ISAC consultancy number:
2025-052
Published date (s):
05/15/2025
PREVIEW:
Vulnerability has been discovered in Google Chrome which could allow an arbitrary Code execution. The successful exploitation of this vulnerability could allow arbitrary execution of code in the context of the connected user. According to the privileges associated with the user, an attacker could then install programs; Show, modify or delete data; Or create new accounts with complete user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than those that operate with administrative user rights.
Threat intelligence:
There is currently no report of this vulnerability exploited in the wild.
Affected systems:
- Chrome prior to 136.0.7103.113/.114 for Windows and Mac
- Chrome prior to 136.0.7103.113 for Linux
Large and medium government entities
Small government
Large and medium business entities
Small business entities
