Google Issues Emergency Chrome Update to Fix Critical RCE Flaw

Google has issued an emergency security update for Chrome across all platforms, rolling out version 142.0.7444.134 and 142.0.7444.135 to address five critical and medium-severity vulnerabilities. The update targets urgent security concerns in the browser’s WebGPU implementation and other core components that could expose users to remote code execution attacks, with the most severe being CVE-2025-12725, an out-of-bounds write in WebGPU.

The emergency release, which came on 5 November 2025, will gradually roll out across Windows, Mac and Linux systems over the coming days and weeks, while Android users will receive identical fixes via Google Play. iOS users previously received Chrome Stable 142.0.7444.128 on 4 November, aligning with the desktop security improvements, and researchers Hafiizh and Khalil Zhani contributed to the medium-severity patches for Omnibox components, among others.

Chrome’s security team also used detection technologies such as AddressSanitizer, MemorySanitizer and fuzzing to prevent exploitation during the rollout, and bug details remain restricted until most users have installed the updates.