Chrome Update: New High-Severity Flaw in V8 Engine (CVE-2025-12036) Requires Immediate Patch

Chrome Update: New High-Severity Flaw in V8 Engine (CVE-2025-12036) Requires Immediate Patch reports that Google has released a Stable Channel update (version 141.0.7390.122/.123) for Windows, Mac and Linux to address a high-severity vulnerability in the V8 JavaScript engine. The flaw, described as an “inappropriate implementation in V8” and tracked as CVE-2025-12036, was responsibly reported by Google Big Sleep on 15 October 2025.

While technical specifics remain embargoed, the vulnerability is believed to involve a logic flaw or improper type handling within V8, potentially enabling a crafted web page to execute arbitrary code in the browser’s renderer process and, when combined with other weaknesses, could lead to data leakage or privilege escalation. Security experts note that V8 issues have historically been targeted in zero-day attacks, underscoring the urgency of patching.

Google advises all users to update Chrome immediately by going to Settings → Help → About Google Chrome to ensure the version is 141.0.7390.122 or higher, and enterprise admins are urged to deploy the update fleet-wide as soon as possible, especially where browser access is mission-critical, according to Google.