Microsoft has now published guidance for CVE-2026-5858, a critical heap buffer overflow in WebML affecting Google Chrome before version 147.0.7727.55. The flaw can be triggered by a crafted HTML page, which means a remote attacker could potentially achieve arbitrary code execution through...
Chrome has shipped a fix for CVE-2026-5915, a WebML memory-corruption flaw that could let a remote attacker trigger an out-of-bounds memory write by luring a victim to a crafted HTML page. The bug affects Google Chrome versions prior to 147.0.7727.55, and it is now appearing in Microsoft’s...
Chromium’s CVE-2026-5869 is a textbook example of why browser security remains a moving target even in a heavily sandboxed, frequently updated ecosystem. The flaw is a heap buffer overflow in WebML affecting Google Chrome versions prior to 147.0.7727.55, and Google says a remote attacker could...
Chromium’s CVE-2026-5885 is a reminder that browser security issues do not need to be dramatic to be dangerous. According to the CVE record now in NVD and Microsoft’s Security Update Guide, the flaw involves insufficient validation of untrusted input in WebML in Google Chrome on Windows...