Google Chrome Updates

[harlan4096]

Google Chrome 137.0.7151.119/.120 Stable Channel Update for Desktop

The Stable channel has been updated to 137.0.7151.119/.120 for Windows, Mac and 137.0.7151.119 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log.

This update includes 3 security fixes. Below, we highlight fixes that were contributed by external researchers. Please see the Chrome Security Page for more information.

[$7000]420697404 High CVE-2025-6191: Integer overflow in V8. Reported by Shaheen Fazim on 2025-05-27
[$4000]421471016 High CVE-2025-6192: Use after free in Profiler. Reported by Chaoyuan Peng (@ret2happy) on 2025-05-31

Stable Channel Update for Desktop

[harlan4096]

Stable Channel Update for Desktop

Security Fixes and Rewards

Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven’t yet fixed

This update includes 11 security fixes. Below, we highlight fixes that were contributed by external researchers. Please see the Chrome Security Page for more information.

[harlan4096]

Google Chrome 138.0.7204.96/.97 Stable Channel Update for Desktop

The Stable channel has been updated to 138.0.7204.96/.97 for Windows, 138.0.7204.92/.93 for Mac and 138.0.7204.96 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log.

This update includes 1 security fix.

[NA]427663123 High CVE-2025-6554: Type Confusion in V8.
Reported by Clément Lecigne of Google's Threat Analysis Group on 2025-06-25.This issue was mitigated on 2025-06-26 by a configuration change
pushed out to Stable channel across all platforms.

Google is aware that an exploit for CVE-2025-6554 exists in the wild.

Stable Channel Update for Desktop

[harlan4096]

Google Chrome 138.0.7204.100/.101 Stable Channel Update for Desktop

Tuesday, July 8, 2025

The Stable channel has been updated to 138.0.7204.100/.101 for Windows, Mac and 138.0.7204.100 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log.

Stable Channel Update for Desktop

[harlan4096]

Google Chrome 138.0.7204.157/.158 Stable Channel Update for Desktop

The Stable channel has been updated to 138.0.7204.157/.158 for Windows, Mac and 138.0.7204.157 for Linux which will roll out over the coming days/weeks.

This update includes 6 security fixes. Below, we highlight fixes that were contributed by external researchers. Please see the Chrome Security Page for more information.

• [$7000]425583995 High CVE-2025-7656: Integer overflow in V8. Reported by Shaheen Fazim on 2025-06-17
  
• [NA]427162086 High CVE-2025-6558: Incorrect validation of untrusted input in ANGLE and GPU. Reported by Clément Lecigne and Vlad Stolyarov of Google's Threat Analysis Group on 2025-06-23
  
• [TBD]427681143 High CVE-2025-7657: Use after free in WebRTC. Reported by jakebiles on 2025-06-25
  

Google is aware that an exploit for CVE-2025-6558 exists in the wild.

Stable Channel Update for Desktop

[harlan4096]

Google Chrome 38.0.7204.168/.169 Stable Channel Update for Desktop

The Stable channel has been updated to 138.0.7204.168/.169 for Windows, Mac and 138.0.7204.168 for Linux which will roll out over the coming days/weeks.

This update includes 3 security fixes. Below, we highlight fixes that were contributed by external researchers.

• [$8000]430344952 High CVE-2025-8010: Type Confusion in V8. Reported by Shaheen Fazim on 2025-07-09
  
• [TBD]430572435 High CVE-2025-8011: Type Confusion in V8. Reported by Shaheen Fazim on 2025-07-09
  

Stable Channel Update for Desktop

[harlan4096]

Google Chrome 138.0.7204.183/.184 Stable Channel Update for Desktop

The Stable channel has been updated to 138.0.7204.183/.184 for Windows, Mac and 138.0.7204.183 for Linux which will roll out over the coming days/weeks.

This update includes 4 security fixes. Below, we highlight fixes that were contributed by external researchers. Please see the Chrome Security Page for more information.

[$8000]426054987 High CVE-2025-8292: Use after free in Media Stream. Reported by Anonymous on 2025-06-19

Stable Channel Update for Desktop

[harlan4096]

Google Chrome 140.0.7339.80/81 Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 140 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks.

Chrome 140.0.7339.80 (Linux) 140.0.7339.80/81 Windows and Mac contains a number of fixes and improvements -- a list of changes is available in the log.

This update includes 6 security fixes. Below, we highlight fixes that were contributed by external researchers. Please see the Chrome Security Page for more information.

[NA]434513380 High CVE-2025-9864: Use after free in V8. Reported by Pavel Kuzmin of Yandex Security Team on 2025-07-28
[$5000]437147699 Medium CVE-2025-9865: Inappropriate implementation in Toolbar. Reported by Khalil Zhani on 2025-08-07
[$4000]379337758 Medium CVE-2025-9866: Inappropriate implementation in Extensions. Reported by NDevTK on 2024-11-16
[$1000]415496161 Medium CVE-2025-9867: Inappropriate implementation in Downloads. Reported by Farras Givari on 2025-05-04

We would also like to thank all security researchers that worked with us during the development cycle to prevent security bugs from ever reaching the stable channel.As usual, our ongoing internal security work was responsible for a wide range of fixes:

• 442611697 Various fixes from internal audits, fuzzing and other initiatives
  

Stable Channel Update for Desktop

[harlan4096]

Google Chrome 140.0.7339.127/.128 Stable Channel Update for Desktop

The Stable channel has been updated to 140.0.7339.127/.128 for Windows, 140.0.7339.132/.133 for Mac and 140.0.7339.127 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log.

This update includes 2 security fixes. Below, we highlight fixes that were contributed by external researchers. Please see the Chrome Security Page for more information.

[$43000]440454442 Critical CVE-2025-10200: Use after free in Serviceworker. Reported by Looben Yang on 2025-08-22
[$30000]439305148 High CVE-2025-10201: Inappropriate implementation in Mojo. Reported by Sahan Fernando & Anon on 2025-08-18

We would also like to thank all security researchers that worked with us during the development cycle to prevent security bugs from ever reaching the stable channel.

Stable Channel Update for Desktop