--- title: Google Releases Essential Patch for Critical Chrome... description: Google and Mozilla have released emergency patches for their Chrome and Firefox browsers to address critical vulnerabilities that allowed attackers to bypass... canonical: https://daily.dev/posts/google-releases-essential-patch-for-critical-chrome-vulnerability-exploited-in-russian-espionage-att-4hublkhov twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Google Releases Essential Patch for Critical Chrome Vulnerability Exploited in Russian Espionage Attacks | daily.dev og:description: Google and Mozilla have released emergency patches for their Chrome and Firefox browsers to address critical vulnerabilities that allowed attackers to bypass... og:url: https://daily.dev/posts/google-releases-essential-patch-for-critical-chrome-vulnerability-exploited-in-russian-espionage-att-4hublkhov og:image: https://api.daily.dev/og/posts/4hUbLkHOV.png og:image:alt: Google Releases Essential Patch for Critical Chrome Vulnerability Exploited in Russian Espionage Attacks og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Google Releases Essential Patch for Critical Chrome Vulnerability Exploited in Russian Espionage Attacks **[Collections](https://daily.dev/sources/collections)** · 2 min read · 2 upvotes · 0 comments ## Summary Google and Mozilla have released emergency patches for their Chrome and Firefox browsers to address critical vulnerabilities that allowed attackers to bypass sandbox protections. Chrome's security issue, CVE-2025-2783, was actively exploited in an espionage campaign, while a similar flaw in Firefox also posed significant security risks. Users are strongly advised to update their browsers immediately to protect against these threats. ## Content # Chrome and Firefox Release Patches for Critical Security Flaws Google and Mozilla have released emergency patches to address critical vulnerabilities in their Chrome and Firefox browsers, respectively. These flaws were particularly concerning because they allowed attackers to bypass the browsers' sandbox protections, posing significant security risks to users. ## Google Chrome Vulnerability Google's security patch addresses CVE-2025-2783, a high-severity vulnerability in Chrome that was actively exploited by threat actors. The flaw was discovered by Kaspersky researchers and was used in advanced persistent threats targeting organizations in Russia. This espionage campaign, dubbed Operation ForumTroll, involved sophisticated phishing emails containing malicious links that led to personalized exploits. The attackers were able to bypass Chrome's sandbox protection, making the vulnerability particularly dangerous. The attack aimed at espionage, strongly suggesting state sponsorship. Evidence also showed targeted campaigns against journalists and educational institutions, further highlighting the severity of the exploit. ## Mozilla Firefox Vulnerability Similarly, Mozilla issued a security update for Firefox, particularly the Windows version, to patch a critical bug (CVE-2025-2857) that was being exploited in the wild. This vulnerability bore similarities to the one recently fixed by Google in Chrome. The Firefox flaw also allowed attackers to escape the browser’s sandbox, increasing the risk of users' systems being compromised. Mozilla promptly responded to the threat, ensuring the update also reached other browsers sharing the same codebase, like the Tor Browser. ## User Recommendations Users of Chrome and Firefox, as well as those using other Chromium-based browsers or the Tor browser, are strongly advised to apply the latest updates immediately to protect against these significant security threats. Both Google and Mozilla's swift actions underscore the importance of keeping software up to date to mitigate potential risks from emerging vulnerabilities. ## Similar posts on daily.dev - [Don’t just attend KubeCon \+ CloudNativeCon, Merge Forward your experience\!](https://daily.dev/posts/don-t-just-attend-kubecon-cloudnativecon-merge-forward-your-experience--l0rpp73x8) · CNCF · 1 upvotes · 0 comments - [Announcing H2 2026 KCDs](https://daily.dev/posts/announcing-h2-2026-kcds-m96goajm1) · CNCF · 1 upvotes · 0 comments - [Two months of Open Community Groups](https://daily.dev/posts/two-months-of-open-community-groups-asf52zhbs) · CNCF · 0 upvotes · 0 comments - [CNCF Unveils Schedule for KubeCon \+ CloudNativeCon Europe 2026](https://daily.dev/posts/cncf-unveils-schedule-for-kubecon-cloudnativecon-europe-2026-ikhcoa5cb) · CNCF · 2 upvotes · 0 comments - [CNCF Debuts KubeCon \+ CloudNativeCon Japan 2026 Schedule](https://daily.dev/posts/cncf-debuts-kubecon-cloudnativecon-japan-2026-schedule-xp5pyudub) · CNCF · 1 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#google](https://daily.dev/tags/google), [#vulnerability](https://daily.dev/tags/vulnerability), [#google-chrome](https://daily.dev/tags/google-chrome) [View this post on daily.dev](https://daily.dev/posts/google-releases-essential-patch-for-critical-chrome-vulnerability-exploited-in-russian-espionage-att-4hublkhov) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Google Releases Essential Patch for Critical Chrome Vulnerability Exploited in Russian Espionage Attacks","url":"https://daily.dev/posts/google-releases-essential-patch-for-critical-chrome-vulnerability-exploited-in-russian-espionage-att-4hublkhov","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/google-releases-essential-patch-for-critical-chrome-vulnerability-exploited-in-russian-espionage-att-4hublkhov"},"datePublished":"2025-03-26T05:00:36.160Z","dateModified":"2025-03-28T12:34:41.805Z","description":"Google and Mozilla have released emergency patches for their Chrome and Firefox browsers to address critical vulnerabilities that allowed attackers to bypass...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/dd2eb317b7d280c0413831dae7109122?_a=AQAEuj9","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/dd2eb317b7d280c0413831dae7109122?_a=AQAEuj9","isAccessibleForFree":true,"articleSection":"Collections","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Collections","logo":"https://media.daily.dev/image/upload/s--fk_6ycEi--/f_auto,q_auto/v1780996001/logos/collections?_a=BAMAMiWQ0","url":"https://daily.dev/sources/collections"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/google-releases-essential-patch-for-critical-chrome-vulnerability-exploited-in-russian-espionage-att-4hublkhov","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":2},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,google,vulnerability,google-chrome","timeRequired":"PT2M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Collections","item":"https://daily.dev/sources/collections"},{"@type":"ListItem","position":3,"name":"Google Releases Essential Patch for Critical Chrome Vulnerability Exploited in Russian Espionage Attacks"}]} ```