|
In the Chrome Releases blog post, Srinivas Sista lists the four of six fixed vulnerabilities that were discovered by external security researchers and reported to Google. Google categorizes one of them as high risk. The use-after-free vulnerability CVE-2025-9864 is located in the V8 JavaScript engine. The other vulnerabilities (CVE-2025-9865, CVE-2025-9866, and CVE-2025-9867) are only considered medium risk. Google hasn't commented on internally discovered vulnerabilities.
Chrome usually updates itself automatically when a new version is available. You can manually trigger the update check using the menu item Help About Google Chrome. Google has also released Chrome for Android 140.0.7339.35 and Chrome for iOS 140.0.7339.95. The same vulnerabilities have been fixed in the Android version as in the desktop versions. The Extended Stable Channel for Windows and macOS now also has version 140.0.7339.81 available.
Chrome 140 doesn't offer any new features for users. Google plans to release Chrome 141 at the beginning of October.
|
RELATED ARTICLES | | |
|
