Chrome High-severity Flaws Expose Sensitive Data, Trigger System Crashes

Google has released an urgent security update for its Chrome browser, addressing three high-severity vulnerabilities in the V8 engine that could leak sensitive data or crash the browser. The fixes cover CVE-2025-10890, a side-channel information leakage flaw, and CVE-2025-10891 and CVE-2025-10892, both integer overflow issues, with all three classified as high severity.

The flaws were identified by Google’s automated security research project, Big Sleep, on 9 and 10 September 2025, respectively, and the most serious vulnerability was reported by Mate Marjanović from SharpEdged on 9 July 2025. The supported Chrome versions affected are 140.0.7339.207/.208 for Windows and Mac, and 140.0.7339.207 for Linux, with updates rolling out gradually and users urged to update or check About Chrome to apply the patch. Access to detailed bug information remains restricted until most users receive the security patches, according to Google.