- 254/2025
- High
Google has released an updated Chrome version 142.0.7444.175/.176 for Windows, 142.0.7444.176 for Mac, and 142.0.7444.175 for Linux.
The addressed vulnerabilities could allow the remote attacker to exploit heap corruption via a crafted HTML page and gain access to the affected system.
Sample of the addressed vulnerabilities:
Google Chrome Type Confusion in V8 Vulnerability (CVE-2025-13223):
- CVSS: 8.8
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: Required
- Consequences: Gain Access
It should be highlighted that Google is aware that an exploit for “CVE-2025- 13223” exists in the wild.
Vulnerabilities
- CVE-2025-13223
- CVE-2025-13224
Mitigations
The enterprise should deploy this patch as soon as the testing phase is completed.