Microsoft’s Security Update Guide (SUG) lists CVE-2026-0908 — a use-after-free in ANGLE inside Chromium — not because Microsoft created the bug, but because Microsoft Edge (the Chromium-based builds) consumes Chromium’s open-source components and Microsoft needs to tell Edge customers when a...
Chromium developers have closed a high‑severity upstream bug — tracked as CVE‑2025‑10201 — that the Chromium project describes as an “inappropriate implementation in Mojo” which could be abused, via a crafted HTML page, to bypass Chrome’s site‑isolation protections on Android, Linux and...
