Chrome 144.0.7559.109/.110 for Windows and macOS, and 144.0.7559.109 for Linux available

Google has just patched a high-risk vulnerability in Chrome that could let attackers inject malicious code, steal sensitive data, and, in the worst-case boss fight, take over the entire system. Google strongly recommends installing the freshly released update immediately to stay protected.

Patch available now

According to Google's very brief patch notes, the vulnerability comes from an improper implementation in Chrome's Background Fetch component. This feature allows websites to download large files, like movies or game updates, in the background even after a tab is closed or the browser is restarted. Attackers can abuse this mechanic to inject malicious code through manipulated websites, making exploitation relatively easy.

As usual, Google is keeping the technical details to a minimum. This is done to give users enough time to install the update and to avoid handing attackers a strategy guide for further exploits.

Google has already rolled out fixed versions of Chrome 144.0.7559.109/.110 for Windows and macOS, as well as 144.0.7559.109 for Linux. Android users should update to version 144.0.7559.109. Based on past experience, cleaned-up versions for iOS and Chromium-based browsers like Microsoft Edge are expected to arrive in the coming days.

Get the update now

Desktop users can trigger the update directly through Chrome's built-in update function. Alternatively, the new Chrome version can be downloaded via this link. Android players can grab the update from the Google Play Store and get back in the game safely.