webaudio vulnerability

Google and Microsoft documented CVE-2026-7980 on May 6–7, 2026, as a Chromium WebAudio use-after-free flaw fixed in Chrome before version 148.0.7778.96 and in current Microsoft Edge builds that ingest the patched Chromium code. The bug is officially “medium” in Chromium’s own severity language...

Chromium’s latest browser security advisory is a reminder that memory safety bugs remain the engine’s most persistent headache, and CVE-2026-5864 sits squarely in that category. Google says the flaw is a heap buffer overflow in WebAudio that affects Chrome versions prior to 147.0.7727.55, and...

Microsoft’s Security Update Guide now flags CVE-2026-4677 as a high-severity Chromium issue affecting Google Chrome before 146.0.7680.165, and the underlying bug is the kind of flaw that browser defenders hate most: a remote, user-triggered out-of-bounds read in WebAudio reachable from a crafted...

Chromium’s latest browser security issue underscores a familiar truth: the web remains one of the most dangerous places to process untrusted content, and even a single crafted HTML page can still trigger memory corruption in a modern engine. CVE-2026-4673 is a heap buffer overflow in WebAudio...