Chrome 142 Update Patches High-Severity Flaws

Chrome 142: Update Patches High-Severity Flaws, with Google shipping fixes for five vulnerabilities in the browser, including three high-severity flaws. The first high-risk issue is CVE-2025-12725 (CVSS 8.8), an out-of-bounds write bug in Chrome’s WebGPU graphics API that could enable remote code execution.

The other two high-severity bugs addressed are CVE-2025-12726 and CVE-2025-12727 (CVSS 8.8), in the Views framework and the V8 JavaScript engine respectively, with the former allowing memory corruption via crafted webpages or extensions and the latter commonly targeted by threat actors for remote code execution. The remaining two fixes are medium-severity CVEs for Omnibox, CVE-2025-12728 and CVE-2025-12729.

The update is now rolling out as version 142.0.7444.134 for Linux, 142.0.7444.135 for Mac, and 142.0.7444.134/.135 for Windows, and, according to SOCRadar, the rise of browser-based AI and graphics workloads increases exploitation risk. Google notes that no vulnerabilities have been reported as exploited in the wild, and SecurityWeek’s Ionut Arghire details that Chrome 142 followed the completion of the Chrome 142 stable promotion.