Google Chrome browser (140.0.7339.185/.186) Security Update Advisory

Overview

 

Google has released an update to address a vulnerability in the Chrome(https://www.google.com/chrome) browser. Users of affected versions are advised to update to the latest version.

 

Affected Products

 

Chrome 140.0.7339.185 and earlier (Linux)

Chrome 140.0.7339.185/.186 and earlier (Windows/Mac)

 

Resolved Vulnerabilities

 

High-level heap buffer overflow vulnerability in the Angle function (CVE-2025-10502) [1]

High-level memory free-and-reuse (UAF) vulnerability in the Dawn feature (CVE-2025-10500) [1]

High Level Type Confusion Vulnerability in V8 Functionality (CVE-2025-10585) [1

 

Vulnerability Patches

 

The following Vulnerability Patches were made available in the September 17, 2025 update. For more information on Vulnerability Patches, please refer to the “Google Chrome” Referenced Sites document.

Chrome 140.0.7339.185/.186 and later (Windows/Mac)

Chrome 140.0.7339.185 and later (Linux)

 

Referenced Sites

 

[1] Stable Channel Update for Desktop

https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_17.html

[2] Chrome Update

https://support.google.com/chrome/answer/95414?co=GENIE.Platform%3DDesktop