Chrome Security Update Fixes Critical Remote Code Execution Flaw

Google has released an urgent security update for Chrome to fix two significant vulnerabilities, including a critical remote code execution flaw, with the stable channel updating Chrome to version 140.0.7339.127/.128 for Windows, 140.0.7339.132/.133 for Mac, and 140.0.7339.127 for Linux. The most severe fix is CVE-2025-10200, a critical use-after-free flaw in Chrome’s ServiceWorker component, which earned a $43,000 bounty for the discovery by security researcher Looben Yang.

A second issue, CVE-2025-10201, affects Chrome’s Mojo inter-process communication system and is rated high, with a $30,000 reward awarded to Sahan Fernando and an anonymous contributor. The vulnerability was reported on 22 August 2025, and Google notes the update will roll out gradually to ensure stability across its user base. Users are advised to update their Chrome browsers via the Help menu’s “About Google Chrome” option to ensure protection against these flaws.