Chrome 142 Released: Two high-severity V8 flaws fixed, $100K in rewards paid

Google released Chrome 142, fixing 20 flaws and awarding $100,000 in bug bounties for two high‑severity V8 issues. The two high‑severity vulnerabilities are tracked as CVE-2025-12428 and CVE-2025-12429; CVE-2025-12428 is a type Confusion in V8 reported by Man Yue Mo of GitHub Security Lab on 26 September 2025, with a reward of $50,000, and CVE-2025-12429 is also a type Confusion in V8 reported by Aorui Zhang, with a further $50,000.

Google also awarded $10,000 for a Media object lifecycle vulnerability, CVE-2025-12430, reported by round[.]about. Three high‑severity V8 flaws found by Google’s Big Sleep AI agent received no bug bounty rewards. Chrome 142.0.7444.59/60 is rolling out for Linux, Windows and macOS, with slight version differences across platforms. The article about the release appeared on 3 November 2025.