windows browser patching

Google Chrome CVE-2026-12016, published by NVD on June 11, 2026 and modified on June 12, describes a high-severity DevTools flaw fixed in Chrome 149.0.7827.115 that could let a remote attacker escape the browser sandbox after compromising the renderer process. The important wrinkle is not just...

CVE-2026-7968 is a medium-severity Chromium flaw disclosed on May 6, 2026, in which insufficient validation of untrusted input in Chrome’s CORS handling before version 148.0.7778.96 could let an attacker with renderer compromise bypass the same-origin policy using crafted HTML. That dry sentence...

Google and Microsoft documented CVE-2026-7983 on May 6–7, 2026, as a medium-severity Chromium vulnerability in Dawn that affected Google Chrome before 148.0.7778.96 and Microsoft Edge through its Chromium codebase, allowing cross-origin data leakage through a crafted HTML page. The bug is not...

Google and Microsoft disclosed CVE-2026-7999 on May 6, 2026, as a V8 information-disclosure flaw affecting Google Chrome before 148.0.7778.96 and Chromium-based browsers that consume the same engine fixes, including Microsoft Edge once its corresponding security update is applied. The bug is not...

Google disclosed CVE-2026-8013 on May 6, 2026, as a low-severity Chrome FedCM input-validation flaw fixed before version 148.0.7778.96, where a crafted HTML page could let a remote attacker leak cross-origin data after user interaction. That sounds like a small browser bug, and in isolation it...