Google has launched an urgent update for Chrome after identifying CVE-2025-10585, an active vulnerability in the browser that affects millions of users and puts at risk the wallets of navigator cryptocurrencies that work with plug-ins, according to Charles Guillemet, LED CTO.
The technology company urges users to update your Chrome versions for Windows, Macos and Linux.
The vulnerabilitylocated in the V8 engine of JavaScript and Webassembly of Chromium, allows attackers to execute arbitrary code or compromise complete systems just visiting malicious websites.
Guillemet Underline That this threat is particularly critical for those who store secrets of cryptocurrencies on their devices, suggesting that a simple navigation could lead to the loss of funds if the browser is not updated.
The company has classified the problem as high severity and has chosen not to disseminate technical details to prevent more malicious actors from exploiting it. Chrome users are recommended especially those with digital walletsperform the update immediately to mitigate risks.
As Cryptonotics reported, an attack on the software supply chain shook the cryptocurrency ecosystem through Javascript, although the consequences of this attack were considered minors.
A large number of NPM development packages (nodes packages) had received malicious updates, potentially compromising the safety of many cryptocurrency purses.
For now, neither Google nor Cyber Express clarifies whether the vulnerability of these NPM is related to CVE-2025-10585.