On April 28, 2026, Google shipped Chrome 147.0.7727.137/138 for desktop to fix 30 security flaws, including CVE-2026-7350, a high-severity use-after-free bug in WebMIDI that could help an attacker escape Chrome’s sandbox after compromising the renderer process. The line that matters for...
Chromium’s CVE-2026-6306 is exactly the kind of browser vulnerability that looks narrow at first glance but carries broad real-world risk: a heap buffer overflow in PDFium affecting Google Chrome prior to 147.0.7727.101. Google’s April 15, 2026 stable update says the flaw was fixed in Chrome...