Google disclosed CVE-2026-7902 on May 6, 2026, as a high-severity V8 out-of-bounds memory access flaw fixed in Chrome 148.0.7778.96 for Linux and 148.0.7778.96/97 for Windows and macOS, where a crafted HTML page could enable remote code execution inside Chrome’s sandbox. The immediate lesson is...
Google and Microsoft disclosed CVE-2026-7936 on May 6, 2026, describing a medium-severity object lifecycle flaw in Chromium’s V8 JavaScript engine that affects Google Chrome before version 148.0.7778.96 and can be triggered by a crafted HTML page. The bug is not the kind of banner-grabbing...