Google has released an urgent security update for its Chrome browser, addressing five vulnerabilities that could allow attackers to execute malicious code remotely.
The updates, which fix the issues, are versions 142.0.7444.134/.135 for Windows, 142.0.7444.135 for macOS, and 142.0.7444.134 for Linux.
update comes at a time of heightened attention to browser security, as WebGPU, a modern API for GPU-accelerated web applications, has become a prime target for sophisticated attacks. Remote code execution vulnerabilities in such components could allow malicious websites to take over users' systems without any interaction beyond visiting a compromised page.
See also: iOS 26.1: Apple fixes multiple security vulnerabilities
Google stressed that the fixes were developed in collaboration with external researchers, preventing these issues from reaching a wider audience. The update will be distributed gradually over the coming days and weeks to ensure stability on millions of devices worldwide.
Chrome: Fixes for serious vulnerabilities
Among the five security fixes, three stand out for their high severity, including an out-of-bounds write bug in WebGPU and improper implementations in V8 and Views . These bugs, if left unpatched, could lead to memory corruption , allowing attackers to execute arbitrary code, steal sensitive data , or install malware . The remaining two medium severity issues affect the Omnibox address bar , potentially exposing users to phishing or injection risks .
These severity ratings for the Chrome vulnerabilities are in line with typical ratings for similar browser bugs, underscoring the urgency of the update. Google has withheld full details of the bugs until most users are notified, a standard practice to limit the development of exploits.
See also: Progress fixes serious MOVEit Transfer vulnerability
This update highlights vulnerabilities inherent in modern web standards, such as WebGPU, which promise improved performance for games and AI applications but introduce new attack surfaces.
V8 , which powers Chrome's JavaScript runtime, also remains a frequent target due to its ubiquity in web ecosystems . Security tools like AddressSanitizer and libFuzzer have played a critical role in detecting these bugs during development.
Users should check for updates immediately through the Chrome settings menu under “About Chrome.” Businesses relying on Chrome for enterprise environments are advised to enforce automatic updates and monitor for signs of exploitation, such as unusual browser crashes or network anomalies.
See also: Vulnerability in Windows Cloud Files Mini Filter is being actively exploited
As cyber threats evolve, this incident serves as a reminder of the importance of timely information to protect digital life.
