Chrome Security Update Fixes Improper Implementation in V8 JavaScript Engine

Google has released a stable Chrome update addressing a high-severity flaw in its V8 JavaScript engine, tracked as CVE-2025-13042, with fixes landing in the 142.0.7444.162/.163 build for Windows and 142.0.7444.162 builds for Mac and Linux. The vulnerability was described as an inappropriate implementation in V8 that could affect memory handling and cause crashes or other unexpected behaviour, and researchers reported it on 3 November 2025.

As part of its approach, Google has restricted access to the full report until a majority of users have received the update, and the company noted it typically rewards researchers through the Chrome Vulnerability Reward Program, though the specific reward amount has not yet been announced.

Users benefit from Chrome’s automatic update mechanism, with instructions to verify the version via Settings → Help → About Google Chrome and to restart the browser to ensure patches are applied; updates will roll out over the coming days and weeks. According to Chromereleases.googleblog[.]com, Google’s ongoing security enhancements aim to strengthen Chrome’s posture for billions of users worldwide.