{"id":9273,"date":"2025-12-17T10:04:17","date_gmt":"2025-12-17T10:04:17","guid":{"rendered":"https:\/\/serisec.com\/index.php\/2025\/12\/17\/chrome-security-update-patch-for-critical-vulnerabilities-that-enables-remote-code-execution\/"},"modified":"2025-12-17T10:04:17","modified_gmt":"2025-12-17T10:04:17","slug":"chrome-security-update-patch-for-critical-vulnerabilities-that-enables-remote-code-execution","status":"publish","type":"post","link":"https:\/\/serisec.com\/index.php\/2025\/12\/17\/chrome-security-update-patch-for-critical-vulnerabilities-that-enables-remote-code-execution\/","title":{"rendered":"Chrome Security Update \u2013 Patch for Critical Vulnerabilities that Enables Remote Code Execution"},"content":{"rendered":"

Chrome Security Update \u2013 Patch for Critical Vulnerabilities that Enables Remote Code Execution
\n \t

\n
<\/BR>
\n
\n \t

\n
<\/BR><\/p>\n

\n

Google has released Chrome version 143.0.7499.146\/.147 to address critical security vulnerabilities that could enable remote code execution on affected systems.<\/p>\n

The update is now rolling out to Windows and Mac users, with Linux receiving version 143.0.7499.146. Full deployment is expected over the coming days and weeks.<\/p>\n

The latest stable release includes two high-severity security fixes that pose significant risks to user systems.<\/p>\n

Google\u2019s Patch and Security Fixes<\/strong><\/h2>\n

Security researchers have identified these vulnerabilities as particularly dangerous due to their potential for remote exploitation.<\/p>\n

CVE-2025-14765: Use-After-Free<\/a> in WebGPU\u00a0represents a critical flaw in Chrome\u2019s graphics processing capabilities.<\/p>\n

Discovered by an anonymous researcher on September 30, 2025, this vulnerability allows attackers to exploit memory management errors.<\/p>\n

Google is offering a $10,000 bug bounty<\/a> for this discovery, reflecting the severity of the issue.<\/p>\n

\n\n\n\n\n\n\n
CVE ID<\/th>\nComponent<\/th>\nVulnerability Type<\/th>\nBounty<\/th>\n<\/tr>\n<\/thead>\n
CVE-2025-14765<\/strong><\/td>\nWebGPU<\/td>\nUse After Free<\/td>\n$10,000<\/td>\n<\/tr>\n
CVE-2025-14766<\/strong><\/td>\nV8 JavaScript Engine<\/td>\nOut of Bounds Read and Write<\/td>\nTBD<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/figure>\n

A use-after-free<\/a> vulnerability typically enables attackers to execute arbitrary code by manipulating freed memory, potentially compromising system security.<\/p>\n

CVE-2025-14766: Out-of-Bounds Read and Write in V8\u00a0is another high-risk vulnerability affecting Chrome\u2019s JavaScript engine.<\/p>\n

Reported by security researcher Shaheen Fazim on December 8, 2025, this flaw allows unauthorized memory access, potentially leading to data theft or code execution.<\/p>\n

Out-of-bounds<\/a> operations in core engine components, such as V8, are hazardous because they affect fundamental browser operations.<\/p>\n

Windows and Mac users should expect the update to install automatically over the coming weeks.<\/p>\n

Linux users<\/a> running Chrome can manually check for updates by navigating to Settings > About Chrome, then selecting the option to force an immediate installation.<\/p>\n

Google recommends prioritizing this update because the vulnerabilities it addresses are critical.<\/p>\n

Google employs multiple advanced detection methods to identify and prevent vulnerabilities from reaching stable releases<\/a>.<\/p>\n

These include AddressSanitizer, MemorySanitizer, UndefinedBehaviorSanitizer, Control Flow Integrity, libFuzzer, and AFL.<\/p>\n

The company collaborates with external security researchers throughout development cycles to enhance browser security.<\/p>\n

Users should ensure their Chrome installation is fully updated to protect against potential exploitation of these vulnerabilities. Organizations managing multiple systems should prioritize deploying this critical patch.<\/p>\n

Follow us on Google News<\/a>, LinkedIn<\/a>, and X<\/a> for daily cybersecurity updates. Contact us<\/a> to feature your stories.<\/strong><\/p>\n

The post Chrome Security Update \u2013 Patch for Critical Vulnerabilities that Enables Remote Code Execution<\/a> appeared first on Cyber Security News<\/a>.<\/p>\n<\/div>\n

\t

\n
<\/BR>
\n Abinaya
\n \t

\n
<\/BR>
\nGo to cyber-security-news<\/a>
\n \t

\n
<\/BR><\/p>\n","protected":false},"excerpt":{"rendered":"

Chrome Security Update \u2013 Patch for Critical Vulnerabilities that Enables Remote Code Execution Google has released Chrome version 143.0.7499.146\/.147 to address critical security vulnerabilities that could enable remote code execution on affected systems. The update is now rolling out to Windows and Mac users, with Linux receiving version 143.0.7499.146. Full deployment is expected over the […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[768,129,63,2178,648],"tags":[130],"class_list":["post-9273","post","type-post","status-publish","format-standard","hentry","category-chrome","category-cyber-security","category-cyber-security-news","category-security-updates","category-vulnerability-news","tag-cyber-security-news"],"_links":{"self":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts\/9273"}],"collection":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/comments?post=9273"}],"version-history":[{"count":0,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts\/9273\/revisions"}],"wp:attachment":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/media?parent=9273"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/categories?post=9273"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/tags?post=9273"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}