Chrome Fix: New Use-After-Free Flaw (CVE-2025-11756) in Safe Browsing Component Poses High Risk

Google has released a Stable Channel Update for Desktop to fix a high‑severity use‑after‑free flaw in Chrome’s Safe Browsing component (CVE-2025-11756), with the fixed version rolling out to Windows, macOS, and Linux over the coming days and weeks. The update brings Chrome to version 141.0.7390.107/.108 for Windows and Mac, and 141.0.7390.107 for Linux.

Although Google has not confirmed active exploitation, the use‑after‑free vulnerability in Safe Browsing is described as high risk and is commonly associated with remote code execution or sandbox escape in the wild, potentially aiding phishing or drive‑by download campaigns. Users are advised to manually trigger the update by navigating to Settings → Help → About Google Chrome, allowing the browser to check for and install the latest version.

The flaw is stricly described as a use‑after‑free in Chrome’s Safe Browsing component, the subsystem responsible for detecting and blocking access to malicious websites and files. According to Google, updating promptly helps mitigate the risk for individuals and enterprises alike.