webcodecs

Chromium’s latest security cycle has surfaced a memory-disclosure flaw in WebCodecs, tracked as CVE-2026-5888, and the practical story is less about dramatic remote takeover than about quietly leaking data from browser process memory. Google says the issue affects Chrome prior to 147.0.7727.55...

Chromium’s latest March security wave has exposed another memory-safety flaw in one of the browser’s most performance-sensitive subsystems. CVE-2026-5292 is an out-of-bounds read in WebCodecs affecting Google Chrome prior to 146.0.7680.178, and Google says a remote attacker could trigger the bug...