Google has fixed a vulnerability in Chrome versions 141.0.7390.122/123 for Windows and macOS and 141.0.7390.122 for Linux. According to Google, the vulnerability is not yet being exploited in the wild.

In the Chrome Releases blog post, Srinivas Sista names the fixed vulnerability, which was discovered a week ago by Google Big Sleep. Google Big Sleep is an "AI" tool based on Gemini for detecting security vulnerabilities. It's designed to detect vulnerabilities independently without human help. Google describes this vulnerability (labeled CVE-2025-12036) as an implementation error in the V8 JavaScript engine and classifies it as high risk.

Chrome usually updates itself automatically when a new version is available. You can manually initiate the update check using the menu item Help > About Google Chrome.

Google has also provided Chrome for Android 141.0.7390.122, which fixes the same vulnerabilities as in the desktop versions. The Extended Stable Channel for Windows and macOS still contains Chromium version 140.0.7339.249. Google plans to release Chrome 142 on October 28th. A small group of users will receive the new version this evening.

The makers of other Chromium-based browsers will follow suit with updates. Microsoft Edge, Brave, and Vivaldi are currently at the security level prior to this update, meanwhile Vivaldi has already converted its public beta version 7.7 ("Snapshot") to Chromium 142.

As no newer Chromium version than last week's is available in the Extended Stable Channel, the CVE-2025-12036 vulnerability that was patched this week is probably only present in Chromium 141. In light of this, a Vivaldi update also seems rather unlikely this week.

Opera temporarily reduced its backlog with Opera version 122 based on Chromium version 138, which was released on September 11th and backported additional security patches. Since then, however, no significant progress has been made towards Chromium 142, which will be released next week. The three-week-old beta version 123 uses Chromium 139.