TWO CHROME FLAWS COULD BE TRIGGERED BY SIMPLY BROWSING THE WEB: UPDATE NOW

Summary from the TLDR InfoSec newsletter

Google patched two Chrome vulnerabilities exploitable via malicious web pages: a use-after-free in WebGPU (CVE-2025-14765) that enabled heap corruption, and an out-of-bounds read/write in the V8 JavaScript engine (CVE-2025-14766). Both flaws affect Chrome's 3.4 billion users and require no user interaction beyond visiting a crafted site. Update to version 143.0.7499.146 or later immediately.