This report was translated by AI; nobody has reviewed the translation yet. Original language: Czech.

[TLP:CLEAR] Google Chrome fixes a high-severity vulnerability

Google fixes a high-severity vulnerability in the Google Chrome browser and other browsers based on the Chromium engine. The fix has been released for Windows (version 142.0.7444.162/.163) and macOS (142.0.7444.162); the version for Linux (142.0.7444.162) will be released in the coming days [1]. A fix for the Microsoft Edge browser is not yet available [2]. Details of the vulnerability have not yet been published, probably in line with responsible disclosure principles.

Google Chrome - RCE, memory corruption, application crash (CVE-2025-13042)
CVSS 8.8 (High)

Due to a flaw in the implementation of the V8 JavaScript engine, an unauthenticated remote attacker can crash the application, modify data in memory without authorization and potentially execute code [3].

The vulnerability is present in products:

  • Linux: Google Chrome; >=142, <142.0.7444.162;
  • Windows: Google Chrome; >=142, <142.0.7444.162;
  • MacOS: Google Chrome; >=142, <142.0.7444.162;

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

More information:

The vulnerability was publicly disclosed 11. 11. 2025.

By CESNET, z.s.p.o. Michaela Ručková on 12. 11. 2025.

CESNET, z.s.p.o. Logo