CVE-2026-7927 is a high-severity Chromium type-confusion vulnerability in Chrome’s Runtime component, disclosed on May 6–7, 2026, fixed in Google Chrome 148.0.7778.96 or later and documented by Microsoft because Edge inherits the same Chromium code. The short version is simple: patch Chrome and...
CVE-2026-7348 is a high-severity use-after-free flaw in Chromium’s Codecs component, disclosed April 28, 2026, fixed in Google Chrome 147.0.7727.138 for desktop, and tracked by Microsoft because Chromium-based Edge inherits the underlying browser engine risk. That dry sentence is the whole...