Google and Microsoft disclosed CVE-2026-7354 on April 28, 2026, describing a high-severity out-of-bounds read and write flaw in ANGLE that affects Google Chrome before 147.0.7727.138 and could let a remote attacker attempt a browser sandbox escape through a crafted HTML page. The short version...
Background
Microsoft’s March 2026 security guidance for CVE-2026-4452 lands in a familiar place for anyone who tracks Chromium: the browser engine’s graphics stack remains one of the highest-value targets in modern client software. The issue is described as an integer overflow in ANGLE, the...