Google and Microsoft disclosed CVE-2026-7933 on May 6, 2026, as a medium-severity Chromium WebCodecs out-of-bounds read flaw fixed in Google Chrome before version 148.0.7778.96 and tracked by Microsoft for Chromium-based Edge users through MSRC. The bug is not a headline-grabbing browser...
CVE-2026-7968 is a medium-severity Chromium flaw disclosed on May 6, 2026, in which insufficient validation of untrusted input in Chrome’s CORS handling before version 148.0.7778.96 could let an attacker with renderer compromise bypass the same-origin policy using crafted HTML. That dry sentence...
CVE-2026-8009 is a low-severity Chromium Cast vulnerability fixed in Google Chrome 148.0.7778.96 for Linux and 148.0.7778.96/97 for Windows and macOS, with NVD adding a Chrome application CPE constrained by Windows, Linux, and macOS platform CPEs on May 7, 2026. The answer to the narrow CPE...