Chromium’s CVE-2026-3937 is a narrow but important UI‑spoofing bug in the Downloads UI that Google fixed in the Chrome 146 updates, and Microsoft has recorded the same CVE in its Security Update Guide (SUG) because Microsoft Edge (Chromium‑based) consumes Chromium’s open‑source code. If you saw...
Google and the Chromium project have patched CVE-2025-9867, a medium-severity inappropriate implementation bug in the Downloads component that can be abused for UI spoofing on Chrome for Android, and users should update their mobile and desktop Chromium-based browsers immediately to eliminate...