omnibox spoofing

Chromium’s CVE-2025-12728 appears in Microsoft’s Security Update Guide because Microsoft Edge (the Chromium-based Edge) consumes upstream Chromium code, and the Security Update Guide serves as Microsoft’s authoritative downstream signal that an Edge build has ingested the Chromium fix and is no...

Chromium’s recent CVE entry for an “Incorrect security UI in Omnibox” (CVE‑2025‑12435) is not a mystery when you understand how Chromium, Chrome and Microsoft Edge are interrelated — and why Microsoft documents upstream Chromium bugs in its Security Update Guide. In short: Chromium is the...