Chrome Emergency Fix: High-Severity V8 Flaw (CVE-2025-13042) Risks Remote Code Execution

Google has released an important security update for Chrome Stable Channel addressing a high-severity vulnerability in the V8 JavaScript engine, CVE-2025-13042, described as an inappropriate implementation in V8 that could potentially lead to type confusion, memory corruption, or arbitrary code execution. The patch is rolling out to Windows, macOS, and Linux desktops with Chrome versions 142.0.7444.162/.163.

While there is currently no evidence of active exploitation, vulnerabilities in Chrome’s V8 engine have historically been high-value targets for threat actors. The update instruction for users is to open Chrome, go to chrome://settings/help, verify the version is 142.0.7444.162 or higher, and manually trigger an update if needed. According to Google, the vulnerability lies in how the engine handles certain operations or object types, and the fix impacts Chrome’s JavaScript execution layer. Users are urged to apply the update in the coming days and weeks as rollout continues.