Microsoft’s Security Update Guide lists CVE‑2026‑3920 not because Microsoft wrote the bug, but because Microsoft Edge (the Chromium‑based browser) consumes upstream Chromium code — the Security Update Guide entry is Microsoft’s official signal to Edge customers that the upstream Chromium fix has...
Chromium’s CVE‑2025‑12430 — an object lifecycle issue in Media — appears in Microsoft’s Security Update Guide because Microsoft Edge (Chromium‑based) consumes Chromium open‑source code; the entry exists to tell Edge users and administrators whether Microsoft has ingested the upstream Chromium...