Two Chrome flaws could be triggered by simply browsing the web: Update now

Two Chrome flaws could be triggered merely by visiting a malicious webpage, and Google issued an extra patch to address them. According to Google, the vulnerabilities could be exploited remotely when a user visits a specially crafted site, making timely updates essential for billions of Chrome users. The latest version numbers are 143.0.7499.146/.147 for Windows and macOS, and 143.0.7499.146 for Linux; if Chrome is on 143.0.7499.146 or later, it is protected from these vulnerabilities.

The technical details describe CVE-2025-14765 in the WebGPU API as a use-after-free issue, potentially allowing heap corruption via a crafted HTML page, and CVE-2025-14766 in the V8 engine as an out-of-bounds read and write. Users are advised to let Chrome update automatically and restart to complete the patch, to avoid risk while browsing.