Chromium
The latest Chromium coverage — news, analysis, and updates from the WindowsNews.AI desk.
Chrome 139 Fixes High-Severity libaom AV1 Heap Overflow; Edge Patch to Follow
Google has rolled out a stable-channel update for Chrome that patches CVE-2025-8879, a high-severity heap buffer overflow in the libaom AV1 codec library. The fix landed on August 12, 2025, in Chrome...
Urgent Chrome 139.0.7258.127 Update Closes V8 Race Condition (CVE-2025-8880) — Patch Now for Windows, Edge, and Chromium Browsers
On August 12, 2025, Google rushed out Chrome 139.0.7258.127 with an urgent fix for CVE-2025-8880 — a high-severity race condition in the V8 JavaScript engine that could hand remote attackers the...
Chrome's File Picker Cross-Origin Leak Prompts Emergency Patch for Windows Browsers
A critical logic flaw in Chromium's File Picker—one of the browser's most sensitive UI components—can be weaponized to leak data across origins, forcing Google and Microsoft to ship urgent...
Microsoft Patches CVE-2025-49736: Android Edge UI Spoofing Bug Allows Credential Theft
Microsoft has released a patch for a UI spoofing vulnerability in its Edge browser for Android, tracked as CVE-2025-49736. The flaw, which Microsoft classifies as allowing an unauthenticated attacker...
Windows 10 Gets Edge, WebView2 Security Patches Until 2028 Without ESU
Windows 10 users can keep their Edge browsers and web‑based applications secure for three more years than expected. Microsoft has confirmed that both Microsoft Edge and the WebView2 Runtime will...
Critical CVE-2025-8582 DOM Vulnerability Patched in Chrome and Edge – Users Urged to Update
On August 5, 2025, Google shipped an urgent security update for Chrome that plugs a dangerous hole in the browser's Document Object Model (DOM) handling. Tracked as CVE-2025-8582, the vulnerability...
Microsoft Edge Seals Off Dangerous Filesystem Attack Vector with Latest Chromium Patch for CVE-2025-8580
Microsoft has patched a critical filesystem vulnerability in its Edge browser, CVE-2025-8580, plugging a dangerous hole that could have allowed attackers to execute arbitrary code or access...
FydeOS: A Powerful, Privacy-Focused Alternative to ChromeOS Flex for Modern and Legacy Hardware
FydeOS has been quietly but steadily transforming into a standout alternative to ChromeOS Flex, sparking considerable interest among technology enthusiasts, schools, enterprises, and anyone seeking...
Unlocking the Power of CROSH: The ChromeOS Developer Shell for Diagnostics and Device Management
Beneath the familiar, streamlined interface of ChromeOS exists a robust layer of command-line prowess accessible through the ChromeOS Developer Shell, better known as CROSH. ChromeOS is beloved by...
Critical CVE-2025-8011 V8 JavaScript Engine Vulnerability Threatens Chromium-Based Browsers
A newly identified security vulnerability—CVE-2025-8011—has cast a spotlight on the importance of browser security, particularly for users of Google Chrome and its derivatives. At the heart of...
CVE-2025-8010 Vulnerability in Chromium V8: Impacts, Industry Response, and Security Guidance
A newly disclosed flaw, designated CVE-2025-8010, has thrust the Chromium V8 JavaScript engine into the security spotlight once again. This vulnerability is far from just another line in the long log...
Chrome to Add PlayReady DRM on Windows 11, Matching Edge's 4K Streams
In the rapidly evolving world of high-resolution streaming, browser choices often directly impact the quality and security of online media consumption. The recent announcement that Google Chrome will...