Chrome 141 and Firefox 143 Patches Fix High-Severity Vulnerabilities

According to SecurityWeek, Google promoted Chrome 141 to the stable channel with 21 security fixes, including 12 for security defects reported by external researchers who earned a total of $50,000. Two externally reported bugs, CVE-2025-11205 and CVE-2025-11206, are high-severity heap buffer overflow issues affecting Chrome’s WebGPU and Video components, with Chrome 141 also delivering eight medium-severity fixes and a couple of low-severity holes.

Google says it handed out a $25,000 bug bounty for the WebGPU flaw, reported by Atte Kettunen of OUSPG in early September, and Chrome 141.0.7390.54 is the Linux build with Windows/macOS versions 141.0.7390.54/55; Android patches were included in Chrome 141.0.7390.43.

Mozilla released Firefox 143.0.3 this week, fixing two high-severity defects in the Graphics and JavaScript Engine components, CVE-2025-11152 and CVE-2025-11153, with the Graphics flaw potentially enabling a sandbox escape and the JavaScript Engine weakness a JIT miscompilation. Neither vendor states these flaws have been exploited in the wild, but users are urged to update promptly.