Just two days earlier, on March 10th, Google released the new major version Chrome 146, which you can read about in this Chrome Releases blog post. That update fixed 29 security vulnerabilities, almost all of which were reported by external security researchers. One of the vulnerabilities (CVE-2026-3913) is classified as critical, a buffer overflow in the WebML component. Tobias Wienand, the discoverer of this vulnerability, was rewarded $33,000 for it. He also got an additional $43,000 for CVE-2026-3915, another WebML buffer overflow (although that one only classified as high risk). Eleven se
Emergency Chrome 146 update patches 2 zero-day vulnerabilities…frontier AI models that not only can detect and identity software vulnerabilities quickly but also rapidly generate exploits for them, security has become a key issue for operating AI infrastructure, according to…
…website manages to exploit a vulnerability in Chrome’s renderer—a second bug to escape the renderer sandbox is required to access other sites. Site isolation improves security, but requires extra memory…
…Public research confirms these attacks are possible; consequently, we should expect real-world adversaries to exploit these vulnerabilities to cause harm. Thus, we ask a basic question: What outcomes are real attackers…
…Google said it doesn’t consider fingerprinting a security vulnerability, Apple called the attack "currently out of scope," and Mozilla acknowledged the findings without implementing fixes. The attack creates a large OPFS…
…Exploiting vulnerabilities topped the charts for a sixth year, accounting for 32 percent of successful attacks. Non-interactive lures like phishing emails, however, declined, at just six percent of 2025 intrusions. "What…
…As supply chain attac… By Matthew Suozzo Jul 21, 2025 Open Source Security Announcing OSV-Scanner V2: Vulnerability scanner and remediation tool for open source In December 2022, we released the open…
…than two minutes By Jess Kinghorn Published 21 April 26 Security News A 17-year-old Excel vulnerability is currently being exploited by threat actors, and it's been flagged by the…
…exploitation. Recognizing the risks associated within the complex modem firmware, Pixel 9 shipped with mitigations against a range of memory-safety vulnerabilities. For Pixel 10, Google is advancing its proactive security measures…
…If you're not sure whether this is important, refer to the current list of Android vulnerabilities . So, to avoid becoming a victim of these exploits, upgrade your phone when the security…
…as a Google-made app, but could contain exploitable bugs. A bad actor might then try to trick users to install the vulnerable app. With this new resource, users can now use…
