Google Patches High-Severity Chrome Vulnerability in Latest Update

Google has released Chrome 140 to the stable channel, fixing six vulnerabilities, including a four reported by external researchers. The most severe flaw is CVE-2025-9864, a high-severity use-after-free in the V8 JavaScript engine reported by the Yandex Security Team, which could enable remote code execution. According to Google’s advisory, no bug bounty will be paid for this defect, and details will be restricted until patches reach most users.

The vulnerability falls under memory corruption flaws where exploited use-after-free can lead to heap corruption via crafted HTML pages. The current update spans versions 140.0.7339.80/81 for Windows and macOS and 140.0.7339.80 for Linux, with the extended stable channel at 140.0.7339.81 for Windows and macOS. Google notes that there is no confirmation of exploitation in the wild, but users are urged to update promptly.