Google Chrome Multiple Vulnerabilities

Release Date: 25 Sep 2025

RISK: Medium Risk

TYPE: Clients - Browsers

Multiple vulnerabilities were identified in Google Chrome. A remote attacker could exploit some of these vulnerabilities to trigger remote code execution, denial of service condition and information disclosure on the targeted system.

---

Impact

• Remote Code Execution
• Denial of Service
• Information Disclosure

---

System / Technologies affected

• Google Chrome prior to 140.0.7339.207 (Linux)
• Google Chrome prior to 140.0.7339.207/.208 (Mac)
• Google Chrome prior to 140.0.7339.207/.208 (Windows)
• Google Chrome prior to 140.0.7339.207 (Android)

---

Solutions

Before installation of the software, please visit the software vendor web-site for more details.

Apply fixes issued by the vendor:

• Update to version 140.0.7339.207 (Linux) or later
• Update to version 140.0.7339.207/.208 (Mac) or later
• Update to version 140.0.7339.207/.208 (Windows) or later
• Update to version 140.0.7339.207 (Android) or later

---

Vulnerability Identifier

• CVE-2025-10890
• CVE-2025-10891
• CVE-2025-10892

---

Source

• Chrome

---

Related Link

• https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_23.html
• https://chromereleases.googleblog.com/2025/09/chrome-for-android-update_23.html