Google has released a Stable Channel update (version 141.0.7390.122/.123) for Windows, Mac, and Linux, addressing a high-severity vulnerability in the V8 JavaScript engine — the core component responsible for executing code in Chrome and other Chromium-based browsers.
The flaw, tracked as CVE-2025-12036, is described as an “inappropriate implementation in V8” and was responsibly reported by Google Big Sleep on October 15, 2025.
While technical specifics remain under embargo, the vulnerability likely involves a logic flaw or improper type handling within the V8 engine — a recurring attack surface for sandbox escapes and remote code execution exploits. Given the classification as high severity, exploitation could allow a crafted web page to execute arbitrary code within the browser’s renderer process, potentially leading to data leakage or further privilege escalation when chained with other vulnerabilities.
Security experts note that such V8 issues have historically been targeted in zero-day attacks, making timely patching critical for all users.
Google advises all users to update Chrome immediately by navigating to Settings → Help → About Google Chrome, ensuring the version is 141.0.7390.122 or higher.
Enterprise administrators are encouraged to deploy the update fleet-wide as soon as possible, especially in environments where browser-based access is mission-critical.
Related Posts:
- Google Chrome Patches Three High-Severity Flaws in V8 Engine
- Chrome Update Alert: Two High-Severity Flaws Patched – Update Now to Stay Safe!
- Chrome Releases Stable Channel Update Addressing High Security Vulnerabilities
- Debian 11.2 released: fix over 40 security vulnerabilities including log4j flaws