windows browser security

Google Chrome before version 150.0.7871.47 contains CVE-2026-13976, a medium-severity heap buffer overflow in the browser’s Storage component that could let an attacker who already compromised the renderer process attempt a sandbox escape through a crafted HTML page. That phrasing, published in...

Google Chrome users on Windows, macOS, Linux, and downstream Chromium browsers should treat CVE-2026-14006 as patched only after updating past Chrome 150.0.7871.47, because the flaw is a use-after-free bug in Navigation that could let a remote attacker run code through a crafted HTML page...

Google disclosed CVE-2026-7356 on April 28, 2026, as a high-severity use-after-free flaw in Chrome’s Navigation component, fixed in Chrome 147.0.7727.138 and later, with Microsoft tracking the Chromium issue for Edge through its Security Update Guide. The bug is not the loudest entry in the...

Chromium’s newly disclosed CVE-2026-5905 is a reminder that browser security failures do not always look dramatic on paper to still matter in practice. Google says the flaw is an incorrect security UI in Permissions on Windows versions of Chrome prior to 147.0.7727.55, and that a remote attacker...