Google disclosed CVE-2026-7902 on May 6, 2026, as a high-severity V8 out-of-bounds memory access flaw fixed in Chrome 148.0.7778.96 for Linux and 148.0.7778.96/97 for Windows and macOS, where a crafted HTML page could enable remote code execution inside Chrome’s sandbox. The immediate lesson is...