Google Chrome Vulnerability Could Allow for Arbitrary Code Execution (CVE-2025-8292)

Executive Summary

MS-ISAC Advisory 2025-068 (issued 7/29/2025): a use-after-free vulnerability in Media Stream in Google Chrome could allow for arbitrary code execution in the context of the logged-on user via drive-by compromise. There are no reports of this vulnerability being exploited in the wild at this time.

Municipal Impact

MS-ISAC rates the risk as High for large, medium, and small government entities, so municipal agencies should update Chrome immediately.

SMB Impact

MS-ISAC rates the risk as High for large, medium, and small business entities and Low for home users.

Recommended Actions

1. Apply appropriate updates provided by Google to vulnerable systems immediately after appropriate testing.
2. Ensure use of only fully supported browsers and apply browser updates.
3. Apply the principle of least privilege to all systems and services.

Grey Matter Analysis