Rabat — The General Directorate of Information Systems Security under Morocco’s National Defense Administration issued a critical warning Thursday for Moroccan Google Chrome users about dangerous security flaws in the browser.
The directorate warned that hackers have already exploited one of these vulnerabilities in active attacks.
This flaw allows attackers to run malicious commands remotely and take complete control of infected devices.
Google releases emergency update
Google released an urgent Chrome update to fix four critical security holes, the directorate said in its security bulletin. The most serious vulnerability carries the code CVE-2025-10585 and represents what security experts call a “zero-day” exploit.
Attackers have already used this zero-day flaw in targeted attacks against some systems. The vulnerability sits in Chrome’s V8 JavaScript engine, which processes web content.
How the attack works
The flaw allows attackers to run harmful code on victims’ computers simply by deceiving them into visiting a specially designed website.
Once users visit the malicious site, attackers gain full control over their systems.
Security websites explain that zero-day vulnerabilities represent previously unknown security flaws, allowing attackers to test systems until they find these holes.
When developers haven’t reported or fixed the flaw, it becomes known as a “zero-day” because there is no time left to repair it.
Beyond the zero-day exploit, the Administration’s security bulletin identified three other critical vulnerabilities, namely CVE-2025-10501, CVE-2025-10500, and CVE-2025-10502. All require immediate browser updates to prevent potential attacks.
To face the critical situation and save themselves from any cyberattack, the directorate urged all Moroccan Chrome users to update their browsers immediately.
Users should also refer to Google’s official security bulletin from September 17 for detailed update instructions and additional protection guidance.
The warning comes as cybersecurity threats continue to target internet users worldwide, making regular software updates essential for digital security.
A couple of days ago, the Moroccan National Defense Administration urgently called on Apple users to update their device systems immediately.
The administration issued the warning on September 16, following the discovery of severe security vulnerabilities that officials describe as “critical” in terms of their danger and potential impact.
