Google Chrome Browser (136.0.7103.48/49) Security Update Advisory

Overview

 

Google has released an update to address a vulnerability in the Chrome(https://www.google.com/chrome) browser. Users of affected versions are advised to update to the latest version.

 

Affected Products

 

Chrome 136.0.7103.59 and earlier (Linux)

Chrome 136.0.7103.48/49 and earlier (Windows, Mac)

 

Resolved Vulnerabilities

 

Heap buffer overflow vulnerability in HTML functionality (CVE-2025-4096)

Out-of-bounds memory access vulnerability in the DevTools feature (CVE-2025-4050)

Improper Validation Vulnerability in DevTools Functionality (CVE-2025-4051)

Improper Implementation Vulnerability in DevTools Functionality (CVE-2025-4052)

 

Vulnerability Patches

 

The following Vulnerability Patches were made available in the April 29, 2025 update. For more information on Vulnerability Patches, please refer to the “Google Chrome” Referenced Sites documentation.

 

Chrome version 136.0.7103.59 (Linux)

Chrome version 136.0.7103.48/49 (Windows, Mac)

 

Referenced Sites

 

[1] Stable Channel Update for Desktop

https://chromereleases.googleblog.com/2025/04/stable-channel-update-for-desktop_29.html

[2] Chrome Update

https://support.google.com/chrome/answer/95414?co=GENIE.Platform%3DDesktop