Security Alerts
The latest Security Alerts coverage — news, analysis, and updates from the WindowsNews.AI desk.
Chrome 148 Patches CVE-2026-7971 ORB Bypass in Site Isolation
Google began pushing Chrome 148.0.7778.96 to Windows users on May 6, 2026, delivering a patch for CVE-2026-7971—a medium-severity flaw that undermines Opaque Response Block (ORB) and could enable...
CVE-2026-7972: Chrome GPU Uninitialized Use Vulnerability Fixed – Update on Windows
Google dropped a scheduled security update on May 6, 2026, squashing a medium-severity bug that lurked in Chrome’s GPU process. Cataloged as CVE-2026-7972, the flaw is an uninitialized use...
Chrome 148 Patches Dawn Bug That Lets Attackers Break Out of Browser Sandbox
Google has rolled out an urgent fix for a sandbox escape vulnerability in Chrome on Windows that could hand attackers the keys to the underlying operating system. The flaw, indexed as CVE-2026-7973,...
Chrome 148.0.7778.96 Fixes Code Execution Hole in the Browser’s Rendering Engine—Edge Users Must Patch Too
Google and Microsoft published advisories on May 6 and 7, 2026, confirming that a use-after-free bug in Chromium’s Blink rendering engine could let attackers run arbitrary code inside the...
Chrome 148 Fixes High-Risk DevTools Flaw — Update Chrome and Edge Immediately
On May 6, 2026, Microsoft confirmed that a newly disclosed Chromium vulnerability—CVE-2026-7975—also affects its Edge browser. The use-after-free flaw in DevTools could help attackers escape...
Chrome 148 and Edge Patch Use-After-Free Flaw Exploitable via Malicious Extensions
On May 6, 2026, Google shipped Chrome 148.0.7778.96 to the stable channel, closing a use-after-free vulnerability tracked as CVE-2026-7976. The flaw sits in Chromium’s Views component—the...
Chrome 148.0.7778.96 Patches Canvas Same-Origin Bypass—Here’s What to Do
Google released Chrome 148 on May 5, 2026, patching a medium-severity security flaw in the browser’s Canvas component that could let a malicious website bypass the same-origin policy and read pixel...
High-Severity Chrome Flaw on Mac Gets 8.1 CVSS Score—Update to 148.0.7778.96 Now
Google shipped Chrome 148 to the stable channel on May 6, 2026, fixing a macOS-only vulnerability that could let an attacker escalate privileges on a Mac remotely, with no user interaction required....
Chrome 148 and Edge Patch: WebAudio Bug CVE-2026-7980 Earns High Severity Despite Medium Label
Google and Microsoft have patched a use-after-free vulnerability in Chromium’s WebAudio component, tracked as CVE-2026-7980, shipping the fix in Chrome version 148.0.7778.96 and in current...
Patch Chrome 148 Now: CVE-2026-7979 Media Flaw Risks Data Leak
Google and Microsoft simultaneously disclosed CVE-2026-7979 on May 6, 2026, a medium-severity vulnerability lurking in the Chromium Media component. The flaw, fixed in Chrome version 148.0.7778.96,...
Google and Microsoft Patch CVE-2026-7981 Chrome Codec Bug, Warn Against Skipping Update
Google has released fixes for a medium-severity vulnerability in Chrome’s media codecs, tracked as CVE-2026-7981, that could be exploited by a specially crafted file to compromise a user’s...
CVE-2026-7985 GPU Bug Forces Windows Patch for All Chromium Apps
Google and Microsoft jointly disclosed CVE-2026-7985 on May 6, 2026, a medium-severity use-after-free bug in Chromium's GPU process that could allow a renderer compromise to escalate into a full...