Google has fixed several vulnerabilities in Chrome versions 138.0.7204.183/184 for Windows and macOS and 138.0.7204.183 for Linux. According to Google, none of the vulnerabilities have been exploited for attacks yet. The manufacturers of other Chromium-based browsers will follow suit in the coming days. Meanwhile, Google plans to release Chrome 139 on August 5th.
Security fixes in this Chrome 138 update
In the Chrome Releases blog post, Srinivas Sista listed the one of four patched vulnerabilities that was discovered by external security researchers and reported to Google. Google classifies this vulnerability (CVE-2025-8292) as high risk. It’s a use-after-free vulnerability in the Media Stream component. Google remains silent about the internally discovered security vulnerabilities.
As a rule, Chrome updates itself automatically when a new version is available. You can manually initiate the update check using the menu item Help > About Google Chrome. Google has also provided Chrome for Android 138.0.7204.179, which fixes the same vulnerabilities.
Other Chromium-based browsers
The manufacturers of other Chromium-based browsers are now required to follow suit with updates. Microsoft Edge, Brave, and Vivaldi are currently at the security level prior to this Chrome update.
Opera 120.0.5543.93, on the other hand, is still on the completely outdated Chromium 135 from April and therefore contains its several dozen security vulnerabilities. The developers have at least backported the patch against zero-day vulnerability CVE-2025-6558.
In the developer channel, Opera 121 has skipped at least one Chromium generation and is based on Chromium 137. However, it will probably be a few weeks before Opera 121 moves from the developer channel via the beta channel to the release channel.
Author: Frank Ziemann
Source: PCWorld
Reviewed By: Editorial Team
