browser patch

Microsoft’s final free monthly update for Windows 10 has landed, and the practical consequences are now clear: Microsoft has ended routine OS-level servicing for Windows 10, but Mozilla says Firefox will keep receiving feature and security updates on Windows 10 for the foreseeable future — a...

The Chromium-assigned vulnerability CVE-2025-11460 — a use-after-free in the Storage component — appears in Microsoft’s Security Update Guide because Microsoft Edge (Chromium-based) consumes Chromium’s open-source engine; the Security Update Guide entry is Microsoft’s downstream signal that Edge...

Short answer Microsoft lists Chromium CVEs (like CVE‑2025‑11210) in the Microsoft Security Update Guide (SUG) because Edge (Chromium‑based) consumes upstream Chromium code; the SUG entry tells Edge customers when Microsoft has ingested and shipped the upstream Chromium fix so they can know Edge...

Chromium security teams patched a critical use‑after‑free vulnerability in the ANGLE graphics translation layer tracked as CVE‑2025‑9478, and every Windows and enterprise administrator who manages Chromium‑based browsers — including Microsoft Edge — should verify and deploy the fixes immediately...

Microsoft’s Windows ecosystem kept up a steady drumbeat of wins and weirdness this week: a puzzling Game Bar regression that appears to blunt performance on some AMD Ryzen X3D rigs, fresh Windows 11 preview builds pushing more Control Panel settings into Settings, a major Copilot/AI push that...

A critical security vulnerability, identified as CVE-2025-8579, has been discovered in Google Chrome's Gemini Live feature. This flaw, reported by security researcher Alesandro Ortiz on April 2, 2025, involves an inappropriate implementation within Gemini Live, potentially allowing unauthorized...

A fresh security vulnerability has come to light within the core of today’s most popular browsers. Tracked as CVE-2025-8577, this flaw concerns the Chromium engine’s Picture-in-Picture (PiP) feature—a component found in Google Chrome, Microsoft Edge, and a string of leading browsers. Patching...

Chromium-based browsers, including Microsoft Edge, are once again in the spotlight as CVE-2025-8580—a critical filesystem vulnerability—has been patched in the upstream Chromium project. Microsoft’s prompt response highlights how the Edge team continues to rapidly adopt security fixes from...

A critical security vulnerability has surfaced in Chromium, identified as CVE-2025-8576, raising urgent alarms for users of all Chromium-based browsers, including Microsoft Edge. This flaw, classified as a "use after free" in Extensions, exposes millions of users to potential cyberattacks...

CVE-2025-7657 is a high-severity vulnerability identified as a use-after-free issue in the WebRTC component of Google Chrome versions prior to 138.0.7204.157. This flaw allows remote attackers to potentially exploit heap corruption by enticing users to visit a maliciously crafted HTML page...

Chromium’s evolution has been marked by its robust security model, open-source transparency, and its integration into numerous modern browsers—including Google Chrome and Microsoft Edge. With each major update, security professionals and the wider community scrutinize the codebase, searching for...

In June 2025, a security vulnerability identified as CVE-2025-6557 was disclosed, highlighting insufficient data validation in the Developer Tools (DevTools) component of Google Chrome. This flaw allowed remote attackers to execute arbitrary code by convincing users to perform specific UI...

A recent security vulnerability, identified as CVE-2025-6555, has been discovered in Google Chrome's animation component. This "use after free" flaw allows remote attackers to potentially exploit heap corruption through specially crafted HTML pages. The vulnerability affects Chrome versions...

Microsoft Edge’s relentless evolution continues to intrigue users and IT administrators alike. With the rolling release of Edge version 137.0.3296.83 to the Stable Channel, Microsoft both reasserts its commitment to enterprise-grade security and signals strategic intent in browser feature...

In the rapidly evolving landscape of web browsers, security remains an ever-present concern for both users and developers. The recent disclosure of CVE-2025-5959—a Type Confusion vulnerability identified in V8, the JavaScript and WebAssembly engine used by Chromium-based browsers—highlights both...

Mozilla’s steady pace of browser innovation occasionally gets interrupted by small but perplexing bugs—glitches that may not dominate headlines but quietly erode user trust. Version 139.0.4 of Firefox, a recent maintenance release, exemplifies how crucial even minor updates can be for millions...

In recent advisories, a critical vulnerability has come to light affecting the Chromium browser engine: CVE-2025-5063, classified as a use-after-free issue in the compositing component. This vulnerability has direct implications for both Google Chrome and Microsoft Edge (the latter being based...

Security vulnerabilities in web browsers are nothing new, but the threats posed by flaws in Chromium’s V8 JavaScript engine tend to capture particular attention in the security community. The recently disclosed CVE-2025-5280, described as an “out of bounds write” vulnerability in V8, has...

When news breaks regarding a security vulnerability in one of the world’s most widely used browsers, both end users and enterprise administrators pay close attention. Such is the case with CVE-2025-5281, a flaw in Chromium’s Back-Forward Cache (BFCache) mechanism, recently highlighted by Google...

Microsoft Edge’s relentless pace of evolution has delivered another pivotal security update, underscoring just how critical regular browser maintenance has become in the modern cybersecurity landscape. The release of Edge version 136.0.3240.76, announced yesterday, has already sent ripples...