Google has released a new security update for its Chrome 136 browser, one day later than expected. Several vulnerabilities have been fixed in Chrome versions 136.0.7103.113/114 for Windows and macOS and 136.0.7103.113 for Linux. According to Google, one of the vulnerabilities is already being exploited in the wild. Other Chromium-based browsers are expected to follow suit in the next few days.
In the Chrome Releases blog post, Srinivas Sista names the two of the four fixed vulnerabilities that were discovered by external security researchers and reported to Google. Google classifies these two vulnerabilities (CVE-2025-4664 and CVE-2025-4609) as high risk. Google didn’t provide details on the other two internally discovered vulnerabilities.
Google also released Chrome for Android 136.0.7103.125. This fixes the same vulnerabilities as the desktop versions. Google plans to release Chrome 137 at the end of May.
As a rule, Chrome updates itself automatically when a new version is released. However, if it doesn’t, you can manually update via three-dot menu > Help > About Google Chrome.
Other Chromium-based browsers
The other Chromium-based browsers will be following suit with their own updates. Brave and Microsoft Edge are currently at the security level prior to this Chrome update, with both having switched to Chromium 136 in the first week of May.
Vivaldi isn’t expected to do this until the weekend. The current pre-release version Vivaldi 7.4 RC 2 already contains Chromium 136.0.7103.113. For the current Vivaldi version 7.3.3635.12, the developers have backported a patch against the security vulnerability CVE-2025-4096 from Chromium 136 to Chromium 134. Google closed this vulnerability with a high risk rating two weeks ago.
Opera released version 119 this week, which uses the outdated Chromium 134, for which Google no longer provides updates. In order to catch up, Opera will have to take a big step with its next browser version and skip at least one, preferably two, Chromium generations.
Further reading: The best browsers for security and privacy
Zaloguj się, aby dodać komentarz
Inne posty w tej grupie
Microsoft says it used its own agentic reasoning AI model to help dev
Gaming keyboard or ergonomic keyboard? You typically have to choose.
You’ve probably barely become used to interacting with ChatGPT, Copil
A new command-line application, Windows Edit, is coming to Windows 11
The Edge browser is gaining a nifty little feature, Microsoft said at
Microsoft is waiving the fee to sign up and publish to the Microsoft
