At SecTeer, our mission is straightforward: no customer should be exposed when a vulnerability is exploited actively. As part of that responsibility, we want to brief you on the newly disclosed Chrome 0-day vulnerability and explain how we’ve already operationalized Google’s update across our patching ecosystem.

What Happened?

On Monday, November 17th, Google announced an update for Chrome. The new update (142.0.7444.175/.176) resolves two vulnerabilities. However, Google is aware that an exploit for CVE-2025-13223 exists in the wild.

The vulnerability is a Type Confusion in V8, enabling attackers to corrupt memory and potentially execute arbitrary code through a crafted webpage, requiring no more than the user loading the wrong site.

Because Chrome’s V8 engine underpins several other Chromium-based browsers, other Chrome-based browsers are most likely also affected. That is why it is pivotal to react fast.

How we responded

SecTeer has been closely monitoring Google’s development branch. As soon as we received notification of the vulnerability, our team began packaging the new Chrome version. We have released the package. For our customers, it will be applied automatically if you have enabled “Automatic” for the Google Chrome approval in VulnDetect.

When a Chrome vulnerability is discovered, the real challenge isn’t patching Chrome, it’s identifying all the Chrome instances you didn’t know existed, or if the auto-update was succesful. That’s where Secteer makes the difference.

VulnDetect provides full discovery, identifying every Chrome/Chromium installation, official, portable, dev/beta, embedded or even renamed EXEs.

It displays the exposure window in real-time, so customers see the actual risk, not policy-based assumptions.

PatchPro closes the exposure window fast. Delivers the updated Chrome package even before catalogue systems catch up, deploys patches automatically across all endpoints (including the shadow apps VulnDetect uncovers), and provides verified proof of successful remediation.

Browser-based vulnerabilities are among the fastest exploited in the industry, and reducing your reaction window from hours or days to minutes provides a measurable risk reduction.

Why This Matters

This incident serves as a reminder that browser vulnerabilities remain one of the most effective entry points for attackers. Currently, attackers are targeting browsers faster than IT teams can identify their vulnerable versions.

VulnDetect shows them exactly where they’re exposed, and PatchPro patches it – even the versions Intune never sees. As a company focused on vulnerability detection and secure patch automation, we track and build our processes around speed, reliability and visibility.

With automated updates through VulnDetect and PatchPro, you can be confident that your devices remain protected, allowing you to focus on your core tasks.

Your organization maintains a defensive posture that keeps up to date with the threat landscape, not behind it.

If you want to read Google’s original statement about the update, you can find it here:

https://chromereleases.googleblog.com/2025/11/stable-channel-update-for-desktop_17.html.

Stay Ahead of Attacks – Update and Secure

This active exploit is a stark reminder to be proactive about browser security. During an active exploit like this, even mature environments often discover unmanaged Chrome or Chromium installations they didn’t know existed. Let us help you:

• Identify unmanaged browsers
• Automate patch deployment
• Regain full control of your vulnerability surface

Staying ahead of attackers begins with visibility, and we’re here to provide it.

Book a trial with SecTeer today. Let us show you how many Chrome/Chromium installations in your environment might be unmanaged, especially during an active exploit like this one. We’ll help you regain control over your patching and keep your organization safe.

Book a trial now.