windows browser patching

CVE-2026-7968 is a medium-severity Chromium flaw disclosed on May 6, 2026, in which insufficient validation of untrusted input in Chrome’s CORS handling before version 148.0.7778.96 could let an attacker with renderer compromise bypass the same-origin policy using crafted HTML. That dry sentence...

Google and Microsoft documented CVE-2026-7983 on May 6–7, 2026, as a medium-severity Chromium vulnerability in Dawn that affected Google Chrome before 148.0.7778.96 and Microsoft Edge through its Chromium codebase, allowing cross-origin data leakage through a crafted HTML page. The bug is not...

Google and Microsoft disclosed CVE-2026-7999 on May 6, 2026, as a V8 information-disclosure flaw affecting Google Chrome before 148.0.7778.96 and Chromium-based browsers that consume the same engine fixes, including Microsoft Edge once its corresponding security update is applied. The bug is not...

Google disclosed CVE-2026-8013 on May 6, 2026, as a low-severity Chrome FedCM input-validation flaw fixed before version 148.0.7778.96, where a crafted HTML page could let a remote attacker leak cross-origin data after user interaction. That sounds like a small browser bug, and in isolation it...