Chrome 138 update plugs high-risk browser vulnerability. Update now!

Security fixes in this Chrome 138 update

In the Chrome Releases blog post, Srinivas Sista listed the one of four patched vulnerabilities that was discovered by external security researchers and reported to Google. Google classifies this vulnerability (CVE-2025-8292) as high risk. It’s a use-after-free vulnerability in the Media Stream component. Google remains silent about the internally discovered security vulnerabilities.

As a rule, Chrome updates itself automatically when a new version is available. You can manually initiate the update check using the menu item Help > About Google Chrome. Google has also provided Chrome for Android 138.0.7204.179, which fixes the same vulnerabilities.

Other Chromium-based browsers

The manufacturers of other Chromium-based browsers are now required to follow suit with updates. Microsoft Edge, Brave, and Vivaldi are currently at the security level prior to this Chrome update.

Opera 120.0.5543.93, on the other hand, is still on the completely outdated Chromium 135 from April and therefore contains its several dozen security vulnerabilities. The developers have at least backported the patch against zero-day vulnerability CVE-2025-6558.

In the developer channel, Opera 121 has skipped at least one Chromium generation and is based on Chromium 137. However, it will probably be a few weeks before Opera 121 moves from the developer channel via the beta channel to the release channel.