Google Chrome Updates

[harlan4096]

Google Chrome 135.0.7049.41/42/52 Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 135 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks.

Chrome 135.0.7049.52 (Linux) 135.0.7049.41/42 Windows and Mac contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming Chrome and Chromium blog posts about new features and big efforts delivered in 135.

This update includes 14 security fixes. Below, we highlight fixes that were contributed by external researchers.

[TBD]405140652 High CVE-2025-3066: Use after free in Navigations. Reported by Sven Dysthe (@svn-dys) on 2025-03-21
[$10000]376491759 Medium CVE-2025-3067: Inappropriate implementation in Custom Tabs. Reported by Philipp Beer (TU Wien) on 2024-10-31
[$2000]401823929 Medium CVE-2025-3068: Inappropriate implementation in Intents. Reported by Simon Rawet on 2025-03-09
[$1000]40060076 Medium CVE-2025-3069: Inappropriate implementation in Extensions. Reported by NDevTK on 2022-06-26
[$1000]40086360 Medium CVE-2025-3070: Insufficient validation of untrusted input in Extensions. Reported by Anonymous on 2017-01-01
[$2000]40051596[/ur]] Low CVE-2025-3071: Inappropriate implementation in Navigations. Reported by David Erceg on 2020-02-23
[$1000]362545037 Low CVE-2025-3072: Inappropriate implementation in Custom Tabs. Reported by Om Apip on 2024-08-27
[$500]388680893 Low CVE-2025-3073: Inappropriate implementation in Autofill. Reported by Hafiizh on 2025-01-09
[$500]392818696 Low CVE-2025-3074: Inappropriate implementation in Downloads. Reported by Farras Givari on 2025-01-28

Stable Channel Update for Desktop

[harlan4096]

Stable Channel Update for Desktop 135.0.7049.84/.85

Tuesday, April 8, 2025

This update includes 2 security fixes. Below, we highlight fixes that were contributed by external researchers. Please see the Chrome Security Page for more information.

[$4000]405140652 High CVE-2025-3066: Use after free in Site Isolation. Reported by Sven Dysthe (@svn-dys) on 2025-03-21

Chrome Releases

[harlan4096]

Stable Channel Update for Desktop​

Tuesday, April 15, 2025

The Stable channel has been updated to 135.0.7049.95/.96 for Windows, Mac and 135.0.7049.95 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log.

Security Fixes and Rewards

Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven’t yet fixed.

This update includes 2 security fixes. Below, we highlight fixes that were contributed by external researchers. Please see the Chrome Security Page for more information.

[TBD]409619251 Critical CVE-2025-3619: Heap buffer overflow in Codecs. Reported by Elias Hohl on 2025-04-09
[TBD]405292639 High CVE-2025-3620: Use after free in USB. Reported by @retsew0x01 on 2025-03-21

[harlan4096]

Google Chrome 135.0.7049.114 / .115 Stable Channel Update for Desktop

The Stable channel has been updated to 135.0.7049.114/.115 for Windows, Mac and 135.0.7049.114 for Linux which will roll out over the coming days/weeks.

This update includes 1 security fix. Please see the Chrome Security Page for more information.

Our ongoing internal security work was responsible for a wide range of fixes:

• 412443038 Various fixes from internal audits, fuzzing and other initiatives
  

Stable Channel Update for Desktop

[harlan4096]

Stable Channel Update for Desktop​

Tuesday, April 29, 2025

The Chrome team is delighted to announce the promotion of Chrome 136 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks.

Chrome 136.0.7103.59 (Linux) 136.0.7103.48/49 Windows and Mac contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming Chrome and Chromium blog posts about new features and big efforts delivered in136.

[harlan4096]

Stable Channel Update for Desktop​

Tuesday, May 6, 2025

The Stable channel has been updated to 136.0.7103.92/.93 for Windows, Mac and 136.0.7103.92 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log.

This update includes 2 security fixes. Below, we highlight fixes that were contributed by external researchers. Please see the Chrome Security Page for more information. [$7000][412057896]

Medium CVE-2025-4372: Use after free in WebAudio. Reported by Huang Xilin of Ant Group Light-Year Security Lab on 2025-04-20

[harlan4096]

Google Chrome 136.0.7103.113/.114 Stable Channel Update for Desktop

The Stable channel has been updated to 136.0.7103.113/.114 for Windows, Mac and 136.0.7103.113 for Linux which will roll out over the coming days/weeks.

This update includes 4 security fixes.
Below, we highlight fixes that were contributed by external researchers.
[N/A]415810136 High CVE-2025-4664: Insufficient policy enforcement in Loader. Source: X post from @slonser_ on 2025-05-05
[TBD]412578726 High CVE-2025-4609: Incorrect handle provided in unspecified circumstances in Mojo. Reported by Micky on 2025-04-22

Stable Channel Update for Desktop

[harlan4096]

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 137 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks.

Chrome 137.0.7151.55 (Linux) 137.0.7151.55/56 Windows and Mac contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming Chrome and Chromium blog posts about new features and big efforts delivered in 137.

This update includes 11 security fixes.

[harlan4096]

Google Chrome 137.0.7151.68/.69 Stable Channel Update for Desktop

The Stable channel has been updated to 137.0.7151.68/.69 for Windows, Mac and 137.0.7151.68 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log.

This update includes 3 security fixes. Below, we highlight fixes that were contributed by external researchers. Please see the Chrome Security Page for more information.

[N/A]420636529 High CVE-2025-5419: Out of bounds read and write in V8. Reported by Clement Lecigne and Benoît Sevens of Google Threat Analysis Group on 2025-05-27. This issue was mitigated on 2025-05-28 by a configuration change pushed out to Stable across all Chrome platforms.

[$1000]409059706 Medium CVE-2025-5068: Use after free in Blink. Reported by Walkman on 2025-04-07

Google is aware that an exploit for CVE-2025-5419 exists in the wild.

Stable Channel Update for Desktop