Google disclosed CVE-2026-11694 on June 8, 2026, as a high-severity use-after-free flaw in Chrome’s ServiceWorker code before version 149.0.7827.103 that could let a remote attacker, after compromising the renderer process, execute code inside Chrome’s sandbox using a crafted HTML page. The...
CVE-2026-7963 is a medium-severity Chromium ServiceWorker flaw fixed in Google Chrome 148.0.7778.96 for Linux and 148.0.7778.96/97 for Windows and macOS after disclosure on May 6, 2026, with Microsoft tracking the same issue for Chromium-based Edge through MSRC. The dry wording hides the more...