v8 memory safety

CVE-2026-7899 is a high-severity V8 memory-safety flaw fixed in Google Chrome 148.0.7778.96 for Linux and 148.0.7778.96/97 for Windows and macOS, released on May 5, 2026, after Google determined that crafted HTML could trigger sandboxed arbitrary code execution. The bug is not the kind of...

Chromium’s CVE‑2026‑3926 — an out‑of‑bounds read in the V8 JavaScript engine — was cataloged in Microsoft’s Security Update Guide (SUG) because Microsoft Edge (the Chromium‑based browser) consumes upstream Chromium open‑source code; the SUG entry exists to tell Edge users whether Microsoft’s...

Chromium vulnerabilities show up in Microsoft’s Security Update Guide because Microsoft Edge (the Chromium‑based browser) consumes Chromium’s open‑source components—so the guide records upstream CVEs to tell Edge customers whether their Edge build is still exposed or has already ingested the...

The Chromium CVE labeled CVE‑2025‑12441 — an out‑of‑bounds read in the V8 JavaScript engine — appears in Microsoft’s Security Update Guide because Microsoft Edge (the Chromium‑based browser) consumes upstream Chromium open‑source code; the Security Update Guide entry exists to tell Edge users...