Google Chrome Emergency Update: High-Severity Memory Corruption Flaws Fixed in WebGPU and V8

On 17 December 2025 Google rolled out an important security update for the Stable desktop channel, patching two high-severity memory corruption flaws in WebGPU and the V8 engine. The update brings Chrome to version 143.0.7499.146/147 for Windows and Mac, and 143.0.7499.146 for Linux. It addresses two flaws described as high severity and caused by external researchers: CVE-2025-14765, a Use-After-Free in WebGPU, and CVE-2025-14766, an Out of bounds read and write in V8.

The latter flaw allows memory reads or writes outside intended boundaries, potentially enabling renderer sandbox escapes or data leakage. A $10,000 bounty was awarded to the anonymous researcher who reported CVE-2025-14765 on 30 September 2025, highlighting its potential severity. While updates often roll out automatically, administrators and users are advised to verify manually and ensure endpoints are on version 143.0.7499.146+.