As per reports, on Thursday (18 September), the General Directorate of Information Systems Security under Morocco’s National Defense Administration issued a critical warning for Moroccan Google Chrome users regarding severe security flaws in the browser.
• The authority confirmed that hackers have already exploited one of these vulnerabilities (CVE-2025-10585) in active cyberattacks.
• The flaw, located in Chrome’s V8 JavaScript engine, allows attackers to remotely execute malicious commands simply by convincing a user to visit a specially crafted web page. Once exploited, the vulnerability enables attackers to take complete control of the infected device.
• In addition to this zero-day flaw, three other critical vulnerabilities (CVE-2025-10501, CVE-2025-10500, CVE-2025-10502) have also been flagged, all carrying the highest severity rating.
• The directorate stressed that Google released an urgent security update on Wednesday (17 September) and urged all users in Morocco to update their Chrome browsers immediately to mitigate risks.
