A warning saying “Google Chrome has a critical security vulnerability, update immediately” does not prove your device is infected or identify a particular vulnerability. The first distinction is whether you are seeing a webpage, a website notification, or a genuine Chrome update notice. Start by closing the suspicious warning, then use the update and notification controls below to address what is bringing it back.
Close the warning without using its download link
This removes the suspicious page from view without downloading its proposed update. Close the offending tab with Ctrl+W on Windows or Linux, or Command+W on Mac.
If the page hides the browser controls in full-screen mode, hold Esc to leave full screen. Then close the offending tab using Chrome’s tab controls.
To close the whole Chrome window, press Ctrl+Shift+W on Windows or Linux, or Command+Shift+W on Mac. If Chrome is unresponsive on Windows, press Ctrl+Shift+Esc to open Task Manager. Ending Chrome can lose unsaved browser work.
Under Processes, select Google Chrome. Click End task.
If Chrome is unresponsive on Mac, press Option+Command+Esc. Select Google Chrome. Click Force Quit.
For a persistent dialog on iPhone or iPad, enable Airplane Mode on the device. Quit Chrome. Close the tab containing the persistent dialog.
Install the real update through Chrome or your app store
Updating Chrome addresses browser vulnerabilities. Website notification permissions remain in place, so a recurring notification needs its own fix.
On Windows or Mac, open Chrome’s More > Help > About Google Chrome. Opening this page checks for updates. Select Relaunch when offered.
For an update already downloaded in the background, close Chrome. On Windows, close every Chrome window. Reopen Chrome to apply that update.
On Android, open Google Play Store > profile icon > Manage apps & device. Under Updates available, tap Update beside Chrome.
On iPhone or iPad, open App Store > My Account or your profile photo. Apple lists the waiting updates under App Updates, while Google’s Chrome documentation calls the same list Available Updates, so open whichever heading your App Store shows. Tap Update beside Chrome.
On Chromebook, select the time > Settings > About ChromeOS > Check for updates. Restart after the update finishes downloading.
On Linux, install the available Google Chrome update through your distribution’s package manager. The exact controls depend on the distribution. Restart Chrome after installation.
If Chrome’s own update page reports an error, restart the computer before retrying the update. For continued failures, check your security or parental-control software’s update permissions, including access to tools.google.com and dl.google.com. Reinstall Chrome from Google’s official download page for damaged installation files, or contact your administrator when work or school restrictions prevent updating.
Block the website sending the notification
For a website notification on desktop Chrome, including Chromebook, open More > Settings > Privacy and security > Site Settings > Notifications. Beside Not allowed to send notifications, select Add. Enter the offending site’s address. Select Add again to block that sender.
For a site already open in a desktop tab, set its notification permission through View site information > Notifications > Block. Use the existing tab; do not follow the suspicious notification back to the site.
On Android, turn off website notifications through Chrome’s More > Settings > Site settings > Notifications using the top-level switch. To block only an already-open site instead, turn off Show notifications under Page info > Permissions > Notifications.
Block unwanted pop-up windows and redirects
On desktop Chrome or Chromebook, open More > Settings > Privacy and security > Site Settings > Pop-ups and redirects. Find the offending site’s allowed exception. Open its More menu. Select Block.
On Android, open Chrome’s More > Settings, then Site settings > Pop-ups and redirects. Google documents this parent menu as Permissions in its Android notification instructions, so use whichever of the two your version of Chrome shows. Turn Pop-ups and redirects off.
On iPhone or iPad, open Chrome’s More > Settings > Content settings > Block pop-ups. Turn Block pop-ups on. Use notification permissions for recurring website alerts, because pop-up blocking controls browser windows separately.
Check extensions and the page Chrome opens at startup
These desktop checks address suspect extensions and startup settings that bring the warning back. Open More > Extensions > Manage extensions. Switch off a suspect extension to test whether the warning stops.
To uninstall that extension, select Remove. Confirm with Remove.
If the warning returns whenever Chrome starts, open More > Settings > On startup. Select Open the New Tab page.
For additional browser checks, open More > Settings > Privacy and security > Go to Safety Check. Safety Check covers browser issues involving updates, permissions, and extensions; it does not scan the entire operating system for malware. Select a flagged item to open its recommended fix.
Reset Chrome when browser changes keep the warning returning
On desktop Chrome, open More > Settings > Reset settings. Select Restore settings to their original defaults. This resets browser settings and disables extensions while keeping saved bookmarks and passwords.
Confirm with Reset settings. Keep extensions you do not trust disabled after the reset.
Remove installed downloads and secure exposed passwords
If you installed software from the warning or entered a password, address that now. Chrome’s browser settings do not handle those consequences.
On Windows 11, open Start > Settings > Apps > Installed apps. Select the unwanted program. Choose Uninstall. Complete its removal prompts.
Next, open Windows Security > Virus & threat protection. Run Quick scan. For a full scan, choose Full scan under Scan options. Review Protection history afterward.
On Mac, locate the unwanted app in Finder > Applications. Use its Uninstall or Uninstaller if supplied. For an app without an uninstaller, move it to Trash. Empty Trash.
On Android, open Play Store > profile picture > Play Protect > Settings. Turn on Scan apps with Play Protect. Remove recently installed suspect apps one at a time. Restart normally after each removal to test whether the warning returns.
Change any password you entered into the fake alert. For an exposed Google Account, open your account independently of the warning. Open Security & sign-in > Review security events. Flag unfamiliar activity.
Review Your devices > Manage devices. Enable 2-Step Verification. If you are locked out, use Google’s account recovery page.
Google removed the Chrome Cleanup Tool and its malware scan starting with Chrome 111. Current browser controls and operating-system malware protection replace those retired options.
If unwanted software persists on Windows, save your work before choosing Scan options > Microsoft Defender Antivirus (offline scan), which restarts the PC.
On Android devices supporting the power-menu procedure, open the power menu, touch and hold Power off, then confirm Safe mode. Remove suspect apps one at a time, restarting normally after each removal to test.
Frequently Asked Questions
How do I stop a malicious page from reopening on a locked Chromebook?
Follow Google’s hardware-reset instructions for your Chromebook model; its fallback is Refresh+Power. Sign in and reopen Chrome. Close the Restore prompt without selecting Restore, which would reopen the malicious page.
Where do I enable Safe Browsing?
On desktop Chrome, open More > Settings > Privacy and security > Security, then select Enhanced protection or Standard protection. On Android, iPhone, and iPad, use More > Settings > Privacy and security > Safe Browsing to select a protection level. This protects against dangerous sites and downloads; it does not replace updates or device cleanup.
Does turning off system notifications remove the website’s permission?
No. System notification controls suppress alerts without removing the website’s underlying permission. They also do not close an in-page warning. On Windows 11, you can silence Chrome through Start > Settings > System > Notifications by disabling Chrome under Notifications from apps and other senders.
How can I keep Chrome updated automatically on my phone?
On Android, open Play Store > profile picture > Manage apps & device > Manage > Chrome > More, then select Enable auto update. On iPhone or iPad, open device Settings > Apps > App Store and turn on App Updates.