chrome security

Microsoft’s Security Update Guide now flags CVE-2026-4677 as a high-severity Chromium issue affecting Google Chrome before 146.0.7680.165, and the underlying bug is the kind of flaw that browser defenders hate most: a remote, user-triggered out-of-bounds read in WebAudio reachable from a crafted...

A newly disclosed **heap buffer overflow in Chrome’s CSS engine** has put one of the browser’s most ubiquitous attack surfaces back under the microscope. The flaw, tracked as **CVE-2026-4442**, affects Google Chrome versions prior to **146.0.7680.153** and, according to Microsoft’s Security...

Google’s latest Chrome security advisory for CVE-2026-4679 is a reminder that even mature browser engines still carry hard-to-predict memory-corruption risks in core rendering subsystems. The flaw is described as an integer overflow in Fonts that could let a remote attacker trigger an...

Google Chrome users are facing another serious browser security issue, and this time the spotlight is on CVE-2026-4675, a heap buffer overflow in WebGL that affected Chrome versions prior to 146.0.7680.165. Google’s own release notes place the bug in the March 23, 2026 Stable channel update, and...

Chromium’s latest browser security issue underscores a familiar truth: the web remains one of the most dangerous places to process untrusted content, and even a single crafted HTML page can still trigger memory corruption in a modern engine. CVE-2026-4673 is a heap buffer overflow in WebAudio...

Google’s disclosure of CVE-2026-4447 is another reminder that Chromium’s V8 engine remains one of the browser world’s most sensitive attack surfaces. According to the advisory record, a remote attacker could execute arbitrary code inside a sandbox by luring a victim to a crafted HTML page, with...

Google’s latest Chrome stable-channel security update is drawing attention not because of another routine patch, but because of a vulnerability that can turn a renderer compromise into something far more serious: a possible sandbox escape. The issue, tracked as CVE-2026-4451, affects Google...

The release of CVE-2026-4456 is another reminder that browser security increasingly hinges on tiny memory-lifetime mistakes with outsized consequences. Google says the flaw is a use-after-free in the Digital Credentials API, affecting Chrome versions before 146.0.7680.153, and that a remote...

Google’s Chrome security team has patched a serious heap buffer overflow in ANGLE, tracked as CVE-2026-4448, in Chrome 146.0.7680.153 and later. The flaw could let a remote attacker trigger heap corruption through a crafted HTML page, which makes it especially important because the attack...

Background Microsoft’s March 2026 security guidance for CVE-2026-4452 lands in a familiar place for anyone who tracks Chromium: the browser engine’s graphics stack remains one of the highest-value targets in modern client software. The issue is described as an integer overflow in ANGLE, the...

Google has identified CVE-2026-4449 as a use-after-free in Blink affecting Chrome prior to 146.0.7680.153, and the bug can let a remote attacker potentially trigger heap corruption through a crafted HTML page. Microsoft’s Security Update Guide records the same issue for downstream visibility...

The latest Chrome security entry for CVE-2026-4461 matters because it lands in the middle of a very active March 2026 patch cycle for Chrome 146, and it points to a classic high-risk browser bug class: heap corruption in V8 triggered by a crafted HTML page. Google’s release notes show that...

The Chrome security ecosystem is once again dealing with a memory-corruption flaw that matters far beyond a single browser tab. CVE-2026-4463, a heap buffer overflow in WebRTC, affects Google Chrome versions prior to 146.0.7680.153 and can be triggered by a crafted HTML page that induces heap...

Google rolled out an emergency Stable‑channel update for the Chrome 145 line on March 3, 2026, moving desktop builds to 145.0.7632.159/160 (Windows/macOS) and 145.0.7632.159 (Linux) to address a batch of serious security holes — ten distinct vulnerabilities that span graphics libraries, the...

A newly disclosed high‑severity vulnerability in Chromium’s PDF rendering engine, PDFium, has been assigned CVE‑2026‑2648 and patched upstream in Chrome 145.0.7632.109 (and sibling builds). The flaw is a heap buffer overflow that — when triggered by a specially crafted PDF — can result in...

Chromium’s CVE-2026-2316 — an insufficient policy enforcement in Frames issue that allows UI spoofing via a crafted HTML page — has been logged not only in Chromium/Chrome advisories but also inside Microsoft’s Security Update Guide (SUG). That single cross-listing raises a common question: why...

Just weeks after multiple security firms began sounding the alarm, research and reporting now show that seemingly benign Chrome extensions have been weaponized to intercept and exfiltrate credentials, session cookies and full conversation contents — a supply‑chain style attack that has exposed...

A newly disclosed type‑confusion vulnerability in the V8 JavaScript engine — tracked as CVE‑2025‑13227 — risks heap corruption in Google Chrome builds prior to 142.0.7444.59, and requires immediate attention from administrators managing any Chromium‑based runtime. Background Google’s official...

Type confusion in V8 that could be triggered by a crafted HTML page was assigned CVE‑2025‑13226 and affects Google Chrome builds prior to 142.0.7444.59, creating a high‑severity risk of heap corruption that can be weaponized into crashes or, in chained attacks, remote code execution. Security...

A type‑confusion flaw in Google’s V8 JavaScript engine — tracked as CVE‑2025‑13230 — could allow a remote attacker to trigger heap corruption by luring a user to a crafted HTML page; Chrome builds prior to 142.0.7444.59 are listed as vulnerable, and organizations should treat this as a...