Google and Microsoft disclosed CVE-2026-7916 in early May 2026, a high-severity Chromium vulnerability in the InterestGroups component that affected Google Chrome before 148.0.7778.96 and Microsoft Edge builds before the corresponding Chromium 148 update. The bug is not the loudest flaw in the...
Chrome’s CVE-2026-8001, disclosed May 6, 2026 and fixed in Chrome 148.0.7778.96 for Linux and 148.0.7778.96/97 for Windows and Mac, is a printing-component use-after-free flaw that could help a renderer-compromising attacker escape the browser sandbox on Linux, macOS, and ChromeOS. That is the...
A newly published Chromium flaw, CVE-2026-5903, has quickly become one of those small-looking browser issues that security teams should not dismiss. Google classifies it as a policy bypass in IFrameSandbox, and the vulnerable Chrome builds are anything before 147.0.7727.55. The attack requires a...