Update Google Chrome now as emergency fix released.
SOPA Images/LightRocket via Getty Images
Updated October 23 with details of a Google Chrome for iOS browser app update alongside the emergency security update for all Windows, macOS, Linux and Android users.
If you are one of the 3 billion users of the Chrome web browser across the Windows, Mac, Linux and Android ecosystems, then you need to ensure you take note as Google issues the second emergency security update in the space of a week. Here’s everything you need to know about CVE-2025-12036, and how to get protected from the potential remote code execution attacks it can open unpatched users to.
ForbesSamsung Galaxy S25 Hack Confirmed — Camera And Tracking AccessedBy Davey WinderGoogle Confirms Second Emergency Chrome Security Update In The Space Of A Week
No sooner has Google taken the unusual step of releasing a ‘single security fix’ update for all users of the world’s most popular web browser, than a second emergency update has been released to deal with yet another high-priority vulnerability that could leave users open to remote code attacks.
The latest update addresses CVE-2025-12036, a highly dangerous vulnerability that impacts the browser’s V8 JavaScript rendering engine, with the power to execute arbitrary malicious code with no further user input than visiting a compromised web page.
Srinivas Sista, from the Google Chrome team, has confirmed that the vulnerability was found by Google’s own AI-powered Big Sleep security resource. “Access to bug details and links may be kept restricted until a majority of users are updated with a fix,” Sista said, adding that the security fix will roll out to all users across “the coming days/weeks.”
Well, when Google says all users, it means everyone except for those who have the Chrome browser on their iPhones. As is always the case, which speaks volumes to the security of the device itself, there is no security update for iOS users. Of course, I have to say that it always amazes me that it is reported there are between 300 and 400 million people using Chrome on iOS, which equates to somewhere between 30 and 40 percent in total. Why anyone would opt for Chrome rather than the privacy-centric Safari browser app is beyond me, but hey ho. Google has, however, updated the Chrome iOS app to version 142.0.7444.46, but, Sista said, this only “includes stability and performance improvements.”
ForbesGmail Account Lockout Warning — Users Must Check This 1 Setting NowBy Davey WinderHow To Protect Google Chrome From CVE-2025-12036 Right Now
The good news is that it’s easy to protect your Google Chrome browser from the potential impact of CVE-2025-12036 immediately. To update your Chrome browser client to 141.0.7390.122/.123 for Windows and Mac, 141.0.7390.122 for Linux, and 141.0.7390.122 for Android, just follow these instructions.
Update Google Chrome window
Davey Winder
As the update process is automated, once it has arrived in your browser, you should see a flag that lets you know it’s there. If you do not see this, then head for the settings menu and select About Google Chrome. This will kickstart the update process. Ensure you follow the instructions correctly, especially when it comes to relaunching your Chrome browser. If you do not, then the update will not be applied and won’t activate the security patch.
Google Chrome successful update window.
Davey Winder
Android users should also note that, as I reported earlier this year, Chrome security updates would no longer be available to some 300 million devices as of August 5. The latest emergency update is a prime example of why ensuring that your device is both capable of, and actually is, running Android 10.0 or later. Earlier versions are the ones that no longer get security updates. Ellen T, a Chrome support manager at Google, has officially confirmed in a Google Chrome community posting that “Chrome 138 is the last version of Chrome that will support Android 8.0 and Android 9.0,” so you know what to do if that includes you!
ForbesUpdate Microsoft Windows Server, 10 And 11 Now — Attacks UnderwayBy Davey Winder