{“lastseen”:”2025-10-31T12:31:33″,”description”:”Google has released an update for its Chrome browser that includes 20 security fixes, several of which are classed as high severity. Most of these flaws were found in Chrome\u2019s V8 engine\u2014the part of Chrome (and other Chromium-based browsers) that runs JavaScript. \\n\\nChrome is by far the world\u2019s most popular browser, used by an estimated 3.4 billion people. That scale means when Chrome has a security flaw, billions of users are potentially exposed until they update.\\n\\nThese vulnerabilities are serious because they affect the code that runs almost every website you visit. Every time you load a page, your browser executes JavaScript from all sorts of sources, whether you notice it or not. Without proper safety checks, attackers can sneak in malicious instructions that your browser then runs\u2014sometimes without you clicking anything. That could lead to stolen data, malware infections, or even a full system compromise.\\n\\nThat\u2019s why it\u2019s important to install these patches promptly. Staying unpatched means you could be open to an attack just by browsing the web, and attackers often exploit these kinds of flaws before most users have a chance to update. Always let your browser update itself, and don\u2019t delay restarting to apply security patches, because updates often fix exactly this kind of risk.\\n\\n## How to update\\n\\nThe Chrome update brings the version number to 142.0.7444.59\/.60 for Windows, 142.0.7444.60 for MacOS and 142.0.7444.59 for Linux. So, if your Chrome is on the version number **142.0.7444.59 or later,** it\u2019s protected from these vulnerabilities.\\n\\nThe easiest way to update is to allow Chrome to update automatically, but you can end up lagging behind if you never close your browser or if something goes wrong\u2014such as an extension stopping you from updating the browser.\\n\\nTo update manually, click the \\”**More** \\” menu (three stacked dots), then choose **Settings** \\u003e **About Chrome**. If there is an update available, Chrome will notify you and start downloading it. Then relaunch Chrome to complete the update, and you’ll be protected against these vulnerabilities. \\n\\nYou can find more detailed update instructions and how to read the version number in our article on how to update Chrome on every operating system.\\n\\n\\n\\n## Technical details\\n\\nAmong the vulnerabilities in the V8 engine there are two that stand out:\\n\\n**CVE-2025-12428 **is a high-severity \\”type confusion\\” vulnerability in the V8 JavaScript engine. This happens when code doesn\u2019t verify the object type it’s handling and then uses it incorrectly. In other words, the software mistakes one type of data for another\u2014like treating a list as a single value or a number as text. This can cause Chrome to behave unpredictably and, in some cases, let attackers manipulate memory and execute code remotely through crafted JavaScript on a malicious or compromised website. Google paid a $50,000 bounty for its discovery, highlighting its severity.\\n\\n**CVE-2025-12036** involves an inappropriate implementation in V8 and is classified as critical. This one allows remote code execution (RCE)\u2014meaning an attacker could run code on your computer just by getting you to visit a specially crafted page. Google\u2019s Big Sleep project, an AI-driven system that automates vulnerability discovery, found the flaw. It stems from improper handling in the internals of the JavaScript and WebAssembly engines and carries a high risk of data theft, malware installation, or even full system compromise.\\n\\nUsers of other Chromium-based browsers\u2014like Edge, Opera, and Brave\u2014can expect similar updates in the near future.\\n\\n* * *\\n\\n**We don\u2019t just report on threats\u2014we remove them**\\n\\nCybersecurity risks should never spread beyond a headline. Keep threats off your devices by downloading Malwarebytes today.”,”published”:”2025-10-31T11:33:48″,”modified”:”2025-10-31T11:33:48″,”type”:”malwarebytes”,”title”:”Update Chrome now: 20 security fixes just landed”,”source”:””,”references”:””,”id”:”MALWAREBYTES:04135DD81EB3872DA2BD1BD6137BA21F”,”bulletinFamily”:”blog”,”cwe”:null,”cvelist”:[“CVE-2025-12036″,”CVE-2025-12428″],”sourceData”:””,”sourceHref”:””,”cvss”:{“score”:0,”severity”:”NONE”,”vector”:”NONE”,”version”:”NONE”},”cvss2″:{},”cvss3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””,”cvssV3″:{“version”:””,”vectorString”:””,”baseScore”:0,”baseSeverity”:””,”attackVector”:””,”attackComplexity”:””,”privilegesRequired”:””,”userInteraction”:””,”scope”:””,”confidentialityImpact”:””,”integrityImpact”:””,”availabilityImpact”:””}},”href”:”https:\/\/www.malwarebytes.com\/blog\/news\/2025\/10\/update-chrome-now-20-security-fixes-just-landed”,”category_name”:”News”,”post_link”:””,”product”:””,”version”:””,”vendor”:””,”ai_description”:””,”ai_severity”:””,”ai_vendor”:””,”ai_product”:””,”ai_version”:””,”ai_score”:0}<\/p>\n","protected":false},"excerpt":{"rendered":"
{“lastseen”:”2025-10-31T12:31:33″,”description”:”Google has released an update for its Chrome browser that includes 20 security fixes, several of which are classed as high severity. Most of these…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[6,8,12,115,13,33,7,11,5],"class_list":["post-24242","post","type-post","status-publish","format-standard","hentry","category-category_news","tag-cve","tag-cvss","tag-exploit","tag-malwarebytes","tag-news","tag-none","tag-security","tag-tapic","tag-vulnerability"],"yoast_head":"\n