Google Chrome Patches Three High-Severity Flaws in V8 Engine

Google Chrome has issued a Stable Channel Update for Desktop, bringing builds 140.0.7339.207/.208 for Windows and Mac and 140.0.7339.207 for Linux, to fix three high-severity flaws in the V8 JavaScript engine. The vulnerabilities include CVE-2025-10890, a side-channel information leakage flaw in V8 reported by Mate Marjanović (SharpEdged) on 9 July 2025, which could let attackers infer sensitive data from subtle variations in system behaviour.

The other two are CVE-2025-10891 and CVE-2025-10892, both integer overflows reported by Google Big Sleep on 9 and 10 September 2025, respectively, that could destabilise memory management and enable arbitrary code execution. The article notes that these flaws were discovered by both independent researchers and Google’s AI-driven security tools. Users on Windows, Mac and Linux should ensure their browsers are updated to the latest Stable Channel release to stay protected.