Rabat — Morocco's General Directorate of Information Systems Security, under the National Defense Administration, issued a critical security alert on Thursday for Google Chrome users in the country, highlighting significant vulnerabilities in the browser.
The directorate warned that hackers have already exploited one of these flaws in active attacks.
This vulnerability enables attackers to remotely execute malicious commands, giving them full control over affected devices.
Google Releases Emergency Update
In response, Google has released an urgent update for Chrome to address four severe security vulnerabilities, as noted in the directorate’s security bulletin. The most severe of these, identified as CVE-2025-10585, is a “zero-day” exploit, meaning it was previously unknown and has already been used in targeted attacks.
The flaw is located in Chrome's V8 JavaScript engine, which handles web content.
How the Attack Works
This vulnerability allows attackers to execute malicious code on victims' computers simply by tricking them into visiting a specially crafted website. Once the user visits the malicious site, attackers gain complete control over the system.
Experts explain that zero-day vulnerabilities are flaws previously unknown to developers, leaving them open to exploitation until patches are made available. Once the flaw is discovered but not yet fixed, it is classified as a "zero-day" because there is no time left to address the issue.
Beyond the zero-day vulnerability, the directorate’s bulletin also identified three additional critical issues—CVE-2025-10501, CVE-2025-10500, and CVE-2025-10502—all of which require immediate updates to prevent potential attacks.
Urgent Call for Immediate Browser Updates
To protect against these threats, the directorate has urged all Moroccan Chrome users to update their browsers without delay. Users are also encouraged to consult Google’s official security bulletin, dated September 17, for detailed update instructions and additional guidance on improving digital security.
This warning follows a global rise in cybersecurity threats, underscoring the importance of regular software updates to safeguard against cyberattacks.
Just days earlier, on September 16, the Moroccan National Defense Administration had issued a similar urgent call for Apple device users to update their systems following the discovery of critical security vulnerabilities.