Google has fixed a high-severity Chrome zero-day vulnerability exploited to escape the browser's sandbox and deploy malware in espionage attacks targeting Russian media outlets and government organizations.

The first Chrome zero-day vulnerability of 2025 has been officially patched, and Google recommends that all Chrome users update immediately.

Kaspersky attributed the hacks to an espionage campaign targeting journalists and employees at educational institutions.