Chrome 140 Release Fixes Critical RCE Vulnerabilities

Google has released Chrome 140 to the stable channel for Windows, Mac and Linux, with the update rolling out to users over the coming days and weeks. The new version, 140.0.7339.80 for Linux and 140.0.7339.80/81 for Windows and Mac, delivers several security fixes and improvements, with a full list of changes available in the Chromium log; Extended Stable Channel users on Windows and Mac will receive version 140.0.7339.81.

Chrome 140 includes six security fixes, three of which were contributed by external researchers, and Google assigns reward amounts for reported issues; according to the article, the most critical issue, CVE-2025-9864, is a use-after-free vulnerability in Chrome’s V8 JavaScript engine.

The other notable fixes include CVE-2025-9865 in the Toolbar component, reported by Khalil Zhani for a $5000 reward, CVE-2025-9866 in the Extensions system reported by NDevTK for $4000, and CVE-2025-9867 in the Downloads component reported by Farras Givari for $1000. An internal fix, ID 442611697, addresses various vulnerabilities uncovered by AddressSanitizer, MemorySanitizer, UndefinedBehaviorSanitizer, Control Flow Integrity, libFuzzer and AFL testing tools.

Users are urged to update Chrome as soon as the new version appears on their devices, to stay protected against remote code execution and related threats.