Google Chrome before 148.0.7778.96 contains CVE-2026-7991, a use-after-free flaw in the browser UI that could let a remote attacker with a compromised renderer process execute code inside Chrome’s sandbox through a crafted HTML page. The vulnerability landed in public tracking on May 6, 2026...
Google has disclosed a new high-severity Chromium flaw, CVE-2026-4462, affecting Blink in Google Chrome versions prior to 146.0.7680.153. The bug is described as an out-of-bounds read that a remote attacker could trigger through a crafted HTML page, which means the vulnerable path is reachable...