widely-deployed-product-advisoryendpoint-software-vulnerability

Google Chrome Update Addresses High-Risk WebGPU and V8 Vulnerabilities

Patch & Detection Intelligence · 2 sources · Updated 4mo ago · First seen Nov 7, 2025

Google released a security update for Chrome Stable Channel (version 142.0.7444.134/.135) on Windows, macOS, and Linux, addressing five vulnerabilities, including three high-severity flaws in core browser components such as WebGPU, Views, and the V8 JavaScript engine. The Canadian Centre for Cyber Security and other sources urged users and administrators to review the advisory and apply the necessary updates to mitigate potential exploitation risks.

The most critical vulnerabilities fixed include CVE-2025-12725, CVE-2025-12726, and CVE-2025-12727, which could allow attackers to compromise affected systems if left unpatched. Users are strongly advised to update their Chrome browsers to the latest version to ensure protection against these high-risk security issues.

Patch this, or something else?See real exploitation activity before you spend the cycle.

Triage this advisory

Event timeline

How this story unfolded

Events from the most recent confirmed update back to the earliest known activity.

2 events · Nov 6, 2025 – Nov 7, 2025

Nov 7, 20251y ago
Canadian Centre for Cyber Security publishes Chrome advisory AV25-728
The Canadian Centre for Cyber Security published advisory AV25-728 to notify users and organizations about the Google Chrome security update and the associated vulnerabilities. The advisory amplified official guidance to apply the patched browser version.
Nov 6, 20251y ago
Google releases Chrome update fixing high-risk WebGPU and V8 flaws
Google issued a Chrome security update addressing multiple high-risk vulnerabilities, including CVE-2025-12725, CVE-2025-12726, and CVE-2025-12727 affecting components such as WebGPU and V8. The update was reported as the primary remediation event for the disclosed flaws.

Do you run this?See real exploitation activity behind this advisory so you can triage it against everything else in the queue.

Prioritize This Patch

Source coverage

Sources

2 references tracked. Mallory keeps watching after this page renders.

Ca CcsNews · Nov 7, 2025

Google Chrome security advisory (AV25-728)Open source ↗

Socradar BlogNews · Nov 6, 2025

Chrome Security Update Fixes High Risk WebGPU and V8 Flaws (CVE-2025-12725, CVE-2025-12726, CVE-2025-12727…)Open source ↗

Mallory platform

See the full picture, correlated to your attack surface.

This page covers what’s public. Mallory adds the parts that aren’t: which of your assets are affected, which threat actors are using it right now, and what to deploy next.

Start Free Trial Open in App

Exposure mappingMap indicators from this story to your assets and identify affected systems in minutes.

Threat actor evidenceEvery observed campaign, victim, and pivot linked to actors named in this story.

Associated malwareMalware, exploits, and IOCs connected to the activity described here.

Detection signaturesYARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.

Scheduled alertsGet matching new stories delivered to your team as they break, not the next morning.

AI threadsAsk questions about this story and take action on the answers.

Google Chrome Update Addresses High-Risk WebGPU and V8 Vulnerabilities

How this story unfolded

Canadian Centre for Cyber Security publishes Chrome advisory AV25-728

Google releases Chrome update fixing high-risk WebGPU and V8 flaws

Sources

See the full picture, correlated to your attack surface.

Related stories

Google Chrome 142 Emergency Update Addresses Multiple High-Risk RCE Vulnerabilities

Critical Vulnerabilities Patched in Google Chrome 142 Stable Release

Google Chrome Stable Channel Update Fixes Three High-Severity Vulnerabilities

Google Chrome Update Addresses High-Risk WebGPU and V8 Vulnerabilities

How this story unfolded

Canadian Centre for Cyber Security publishes Chrome advisory AV25-728

Google releases Chrome update fixing high-risk WebGPU and V8 flaws

Sources

See the full picture, correlated to your attack surface.

Related stories

Google Chrome 142 Emergency Update Addresses Multiple High-Risk RCE Vulnerabilities

Critical Vulnerabilities Patched in Google Chrome 142 Stable Release

Google Chrome Stable Channel Update Fixes Three High-Severity Vulnerabilities