Chromium’s CVE-2026-5904 is a reminder that even “low-severity” browser bugs can become meaningful security issues when they sit inside a component as central as V8 and are reachable through a malicious extension. Google says the flaw is a use-after-free in Chrome versions prior to...
Chromium’s CVE-2026-5861 is a reminder that even a mature browser engine can still be tripped up by classic memory-unsafe behavior at exactly the wrong layer. Microsoft’s Security Update Guide says the bug is a use-after-free in V8 affecting Google Chrome prior to 147.0.7727.55, and that a...