November 7, 2025, 4:20 pm | Read time: 2 minutes
Google has closed five dangerous security vulnerabilities in Chrome with an emergency update. Users should update to the latest version of the browser—updates are available for all platforms.
Attackers Could Execute Malicious Code
Google is currently rolling out updates to Chrome versions 142.0.7444.134 and 142.0.7444.135, which address several vulnerabilities across Android, Windows, macOS, and Linux. Particularly severe is the vulnerability identified as CVE-2025-12725. An anonymous security researcher discovered an out-of-bounds write error in Google’s implementation of the WebGPU programming interface on September 9. This interface is used for rendering 3D content in HTML.
The error allowed attackers to remotely execute malicious code directly through Chrome. It is a memory error where attackers can write data outside the intended memory area through manipulated inputs. As usual, Google is withholding further details to avoid putting users at additional risk.
Also of interest: OpenAI Launches Browser Offensive on Chrome and Others.
Major Security Flaw in Google Chrome: Update Urgently Needed
Google Closes Android Security Vulnerability Exploited by Hackers
Other Critical and Moderate Vulnerabilities
The new Chrome updates also fix two other security vulnerabilities that are also of high severity. On September 25, a flaw was found in Chrome’s V8 JavaScript engine. The vulnerability identified as CVE-2025-12727 arises from a faulty implementation.
The same applies to the vulnerability identified as CVE-2025-12726. This affects the view system in Chrome, which is responsible for rendering the user interface. A flaw in this system can make it easier for attackers to direct users to fake websites.
In addition to these critical fixes, Google has addressed two moderate vulnerabilities in the Omnibox, which is the address and search bar.
Users Should Urgently Install Updates
Windows users are currently receiving the security patches with Chrome versions 142.0.7444.134 or 142.0.7444.135. Users of Android, macOS, and Linux should ensure that version 142.0.7444.134 is installed on their devices. For iOS, Google had already released version 142.0.7444.128 on November 4, which includes the patches.