You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
chrome and edge security
About this tag
Discussions on WindowsForum about Chrome and Edge security often focus on how vulnerabilities in the shared Chromium codebase are handled by Google and Microsoft. A recurring theme is the discrepancy between Chromium's severity labels and third-party scoring, such as CISA's ADP, which can assign higher CVSS scores. This creates challenges for IT teams who must prioritize patches based on the actual risk rather than a single label. Topics include the speed of patch absorption by browser forks and the importance of user action, like relaunching browsers after updates. The tag covers real-world security management for these browsers in enterprise environments.
Google and Microsoft disclosed CVE-2026-8016 on May 6, 2026, as a use-after-free flaw in Chromium’s WebRTC component affecting Google Chrome before version 148.0.7778.96 and tracked through MSRC for Chromium-based Microsoft Edge. The awkward part is not the patch; it is the risk language around...