Chrome Zero-Day Vulnerabilities Exploited in 2025 – A Comprehensive Analysis

Throughout 2025 Google patched eight actively exploited high-severity Chrome zero-days—primarily targeting the V8 JavaScript engine and ANGLE graphics layer, with additional flaws in Mojo and the Loader—that enabled type confusion, out-of-bounds memory access, and sandbox escapes; the report attributes exploitation to nation-state actors and commercial surveillance vendors (including Operation ForumTroll), documents in-the-wild attacks and linked malware (LeetAgent), and urges urgent remediation and layered browser security mitigations.