chromium-ingestion

  1. Verifying Edge Protection for CVE-2025-11205 via Microsoft Security Update Guide and Edge Version

    A Chromium-assigned vulnerability like CVE-2025-11205 (heap buffer overflow in WebGPU) appears in Microsoft’s Security Update Guide because Microsoft Edge (Chromium‑based) consumes the Chromium open‑source engine; Microsoft uses the Security Update Guide to record upstream Chromium CVEs, track...
  2. Chrome 140.0.7339.185/186 Fixes WebRTC UAF CVE-2025-10501; Edge Ingestion Pending

    Google released an emergency Chrome stable update that fixes a use‑after‑free (UAF) vulnerability in the WebRTC component tracked as CVE‑2025‑10501, and Microsoft Edge (Chromium‑based) customers should treat the issue as relevant until Microsoft ships the Chromium ingestion for Edge. Background...