Google Chrome Updates

[harlan4096]

Google Chrome 133.0.6943.53/54 Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 133 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks.

Chrome 133.0.6943.53 (Linux) 133.0.6943.53/54( Windows, Mac) contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming Chrome and Chromium blog posts about new features and big efforts delivered in 133.

This update includes 12 security fixes. Below, we highlight fixes that were contributed by external researchers.

[$7000]390889644 High CVE-2025-0444: Use after free in Skia. Reported by Francisco Alonso (@revskills) on 2025-01-19
[TBD]392521083 High CVE-2025-0445: Use after free in V8. Reported by 303f06e3 on 2025-01-27
[$2000]40061026 Medium CVE-2025-0451: Inappropriate implementation in Extensions API. Reported by Vitor Torres and Alesandro Ortiz on 2022-09-18

Stable Channel Update for Desktop

[harlan4096]

Google Chrome 133.0.6943.60 Stable Channel Update for Desktop

Chrome Releases

[harlan4096]

Google Chrome 33.0.6943.98/.99 Stable Channel Update for Desktop

The Stable channel has been updated to 133.0.6943.98/.99 for Windows, Mac and 133.0.6943.98 for Linux which will roll out over the coming days/weeks.

This update includes 4 security fixes. Below, we highlight fixes that were contributed by external researchers. Please see the Chrome Security Page for more information.

[$55000]391907159 High CVE-2025-0995: Use after free in V8. Reported by Popax21 on 2025-01-24
[TBD]391788835 High CVE-2025-0996: Inappropriate implementation in Browser UI. Reported by yuki yamaoto on 2025-01-23
[TBD]391666328 High CVE-2025-0997: Use after free in Navigation. Reported by asnine on 2025-01-23
[TBD]386857213 High CVE-2025-0998: Out of bounds memory access in V8. Reported by Alan Goodman on 2024-12-31

Stable Channel Update for Desktop

[harlan4096]

Google Chrome 133.0.6943.126/.127 Stable Channel Update for Desktop

The Stable channel has been updated to 133.0.6943.126/.127 for Windows, Mac and 133.0.6943.126 for Linux which will roll out over the coming days/weeks.

This update includes 3 security fixes. Below, we highlight fixes that were contributed by external researchers. Please see the Chrome Security Page for more information.

[$11000]394350433 High CVE-2025-0999: Heap buffer overflow in V8. Reported by Seunghyun Lee (@0x10n) on 2025-02-04
[TBD]383465163 High CVE-2025-1426: Heap buffer overflow in GPU. Reported by un3xploitable && GF on 2024-12-11
[$4000]390590778 Medium CVE-2025-1006: Use after free in Network. Reported by Tal Keren, Sam Agranat, Eran Rom, Edouard Bochin, Adam Hatsir of Palo Alto Networks on 2025-01-18

Stable Channel Update for Desktop

[harlan4096]

Google Chrome 133.0.6943.141/.142 Stable Channel Update for Desktop

The Stable channel has been updated to 133.0.6943.141/.142 for Windows, Mac and 133.0.6943.141 for Linux which will roll out over the coming days/weeks.

This update includes 3 security fixes. Below, we highlight fixes that were contributed by external researchers. Please see the Chrome Security Page for more information.

[$11000]394350433 High CVE-2025-0999: Heap buffer overflow in V8. Reported by Seunghyun Lee (@0x10n) on 2025-02-04
[TBD]383465163 High CVE-2025-1426: Heap buffer overflow in GPU. Reported by un3xploitable && GF on 2024-12-11
[$4000]390590778 Medium CVE-2025-1006: Use after free in Network. Reported by Tal Keren, Sam Agranat, Eran Rom, Edouard Bochin, Adam Hatsir of Palo Alto Networks on 2025-01-18

Stable Channel Update for Desktop

[harlan4096]

Google Chrome 134.0.6998.35/36 Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 134 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks.

Chrome 134.0.6998.35 (Linux) 134.0.6998.35/36 ( Windows) 134.0.6998.44/45 (Mac) contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming Chrome and Chromium blog posts about new features and big efforts delivered in 134.

This update includes 14 security fixes. Below, we highlight fixes that were contributed by external researchers.

[$7000]397731718 High CVE-2025-1914: Out of bounds read in V8. Reported by Zhenghang Xiao (@Kipreyyy) and Nan Wang (@eternalsakura13) on 2025-02-20
[$4000]391114799 Medium CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools. Reported by Topi Lassila on 2025-01-20
[$3000]376493203 Medium CVE-2025-1916: Use after free in Profiles. Reported by parkminchan, SSD Labs Korea on 2024-10-31
[$2000]329476341 Medium CVE-2025-1917: Inappropriate Implementation in Browser UI. Reported by Khalil Zhani on 2024-03-14
[$2000]388557904 Medium CVE-2025-1918: Out of bounds read in PDFium. Reported by asnine on 2025-01-09
[$2000]392375312 Medium CVE-2025-1919: Out of bounds read in Media. Reported by @Bl1nnnk and @Pisanbao on 2025-01-26
[$1000]387583503 Medium CVE-2025-1921: Inappropriate Implementation in Media Stream. Reported by Kaiido on 2025-01-04
[$5000]384033062 Low CVE-2025-1922: Inappropriate Implementation in Selection. Reported by Alesandro Ortiz on 2024-12-14
[$1000]382540635 Low CVE-2025-1923: Inappropriate Implementation in Permission Prompts. Reported by Khalil Zhani on 2024-12-06

Stable Channel Update for Desktop

[harlan4096]

Google Chrome 134.0.6998.88/.89 Stable Channel Update for Desktop

The Stable channel has been updated to 134.0.6998.88/.89 for Windows, Mac and 134.0.6998.88 for Linux which will roll out over the coming days/weeks.

This update includes 5 security fixes. Below, we highlight fixes that were contributed by external researchers.

[$7000]398065918 High CVE-2025-1920: Type Confusion in V8. Reported by Excello s.r.o. on 2025-02-21
[TBD]400052777 High CVE-2025-2135: Type Confusion in V8. Reported by Zhenghang Xiao (@Kipreyyy) on 2025-03-02
[NA]401059730 High CVE-TBD: Out of bounds write in GPU. Reported on 2025-03-05
[$3000]395032416 Medium CVE-2025-2136: Use after free in Inspector. Reported by Sakana.S on 2025-02-10
[$2000]398999390 Medium CVE-2025-2137: Out of bounds read in V8. Reported by zeroxiaobai@ on 2025-02-25

Stable Channel Update for Desktop

[harlan4096]

Google Chrome 134.0.6998.117/.118 Stable Channel Update for Desktop

The Stable channel has been updated to 134.0.6998.117/.118 for Windows, Mac and 134.0.6998.117 for Linux which will roll out over the coming days/weeks.

This update includes 2 security fixes. Below, we highlight fixes that were contributed by external researchers.

[TBD]401029609 Critical CVE-2025-2476: Use after free in Lens. Reported by SungKwon Lee of Enki Whitehat on 2025-03-05

Stable Channel Update for Desktop

[harlan4096]

Google Chrome 134.0.6998.165/.166 Stable Channel Update for Desktop

The Stable channel has been updated to 134.0.6998.165/.166 for Windows, Mac and 134.0.6998.165 for Linux which will roll out over the coming days/weeks.

Stable Channel Update for Desktop

[harlan4096]

Google Chrome 134.0.6998.177/.178 Stable Channel Update for Desktop

The Stable channel has been updated to 134.0.6998.177/.178 for Windows which will roll out over the coming days/weeks.

This update includes 1 security fix. Below, we highlight fixes that were contributed by external researchers. Please see the Chrome Security Page for more information.

[TBD]405143032 High CVE-2025-2783: Incorrect handle provided in unspecified circumstances in Mojo on Windows. Reported by Boris Larin (@oct0xor) and Igor Kuznetsov (@2igosha) of Kaspersky on 2025-03-20

Google is aware of reports that an exploit for CVE-2025-2783 exists in the wild.

Stable Channel Update for Desktop