Critical security vulnerabilities discovered in Chrome and Edge

Important security updates have been released for Google Chrome and Microsoft Edge. The updates address critical vulnerabilities that could be exploited remotely. The BSI has issued a warning.

Critical security vulnerabilities in Chrome and Edge

Users should update their browsers immediately: Chrome version 132.0.6834.83/84 has been released, while Edge has been updated to version 132.0.2957.115. Both updates address a number of security vulnerabilities, including some of high severity. Google has in its Chrome Blog Listed 16 fixed security issues, five of which were rated High. With Microsoft Edge there are two more Edge-specific vulnerabilities. The Federal Office for Information Security (BSI) already has one Warning issued about the vulnerabilities.

The risk for CVE-2025-0291 was considered high, with a CVSS Base Score of 8.8. BSI’s BürgerCERT strongly recommends that users install security updates promptly.

A remote, anonymous attacker could exploit a vulnerability in Google Chrome and Microsoft Edge to execute arbitrary code. BSI

We have updated the updates in the WinFuture download area and linked them at the end of this article. Details about the vulnerabilities are initially withheld so as not to provide attackers with a template. This practice is common until the majority of users have installed the security updates.

Given the severity of the security vulnerabilities and the BSI’s warning, Chrome and Edge users should update their browsers immediately. Both browsers usually offer automatic updates that are installed in the background. To be on the safe side, users can manually check for updates in Settings under “About Google Chrome” or “About Microsoft Edge”.

New features and improvements

In addition to the security fixes, the updates also bring some new features and improvements. For Edge users, for example, there is a new feature to track product prices directly in the address bar. Businesses also benefit from advanced management options, such as integrating Intune policies with the Microsoft Edge management service.

Background information on browser security

Regular browser security updates are an important part of cybersecurity. Chrome and Edge are both based on the Chromium open source project, which explains why security vulnerabilities often affect both browsers equally.