Google Rolls Out Chrome 142 Patching 20 Security Flaws

Google has rolled out Chrome 142 to the stable channel for Windows, Mac, and Linux, bringing the browser up to 142.0.7444.59 (Linux), 142.0.7444.59/60 (Windows), and 142.0.7444.60 (Mac) with a total of 20 security fixes. A significant portion of the fixes are high-severity vulnerabilities in the V8 JavaScript engine that could allow remote code execution through crafted JavaScript objects or web content.

Among the most critical are five high-severity V8 flaws: CVE-2025-12428 and CVE-2025-12429 (both reported by Man Yue Mo of GitHub Security Lab and awarded $50,000 each), CVE-2025-12432, CVE-2025-12433 and CVE-2025-12036 (the latter three reported by Google Big Sleep).

Beyond V8, researchers also addressed issues in Media, Extensions, Storage, Omnibox and PageInfo, with rewards including $10,000 for CVE-2025-12430 and smaller sums for CVE-2025-12431, CVE-2025-12434, CVE-2025-12435 and CVE-2025-12437, and others such as CVE-2025-12439 and CVE-2025-12443.

The Chrome team urges users to update to version 142.0.7444.60 or higher and notes that updates are being rolled out automatically, with enterprise admins especially encouraged to deploy the update across affected systems, according to the article.