Firefox 145 and Chrome 142 Patch High-Severity Flaws in Latest Releases

Google and Mozilla have rolled out Chrome 142 and Firefox 145 updates to address multiple high-severity vulnerabilities. The Chrome 142 update fixes a high-severity inappropriate implementation issue in the V8 JavaScript engine, tracked as CVE-2025-13042, with the release notes noting remote exploitation could lead to DoS or code execution in some scenarios; the latest iteration is 142.0.7444.162 for Linux and macOS, and 142.0.7444.162/.163 for Windows.

Mozilla’s Firefox 145, released to the stable channel, fixes 16 vulnerabilities, including nine rated as high severity, and introduces improved anti-fingerprinting protections. Six of the defects affect graphics and five relate to incorrect boundary conditions in WebGPU; the package also resolves an incorrect boundary conditions flaw in WebAssembly and a JIT miscompilation bug in the JavaScript Engine.

The ninth high-severity bug, tracked as CVE-2025-13027, relates to memory safety flaws affecting Firefox 144 and Thunderbird 144, according to Mozilla, and Google and Mozilla make no mention of active exploits. On the same day, Mozilla also released Firefox ESR 140.5 and Firefox ESR 115.30 with additional fixes.