Web Security
The latest Web Security coverage — news, analysis, and updates from the WindowsNews.AI desk.
Microsoft Edge 137 Update: What's New, Removed & Improved in Security & AI
Microsoft Edge 137 is rolling out with a mix of exciting AI-powered enhancements, security upgrades, and some surprising feature removals. The latest update to Microsoft's Chromium-based browser...
CVE-2025-5064: Critical Background Fetch API Flaw in Chromium Browsers Explained
A newly disclosed vulnerability (CVE-2025-5064) in Chromium's Background Fetch API exposes millions of Chrome and Edge users to potential cross-origin data leaks. This high-severity flaw, rated 8.1...
CVE-2025-5067: Critical Chromium Flaw Exposes Millions - Patch Now
A newly discovered zero-day vulnerability in Chromium-based browsers (CVE-2025-5067) poses severe risks to over 3 billion users worldwide. This memory corruption flaw in Chrome's tab management...
CVE-2025-5065: Critical Chromium Vulnerability in FileSystemAccess API - Risks & Mitigation
A newly discovered vulnerability (CVE-2025-5065) in Chromium's FileSystemAccess API poses significant risks to users of Chrome, Edge, and other Chromium-based browsers. This high-severity flaw could...
CVE-2025-5283: Critical libvpx Vulnerability Threatens Chrome, Edge, and Firefox Users
A newly discovered critical vulnerability in the widely used libvpx video codec library (CVE-2025-5283) is putting millions of web browser users at risk. This use-after-free flaw, affecting Chrome,...
CVE-2025-5066 in Chromium Browsers: Critical Security Flaw Explained
A newly discovered vulnerability, CVE-2025-5066, has sent shockwaves through the Chromium browser ecosystem, affecting millions of users worldwide. This critical heap corruption flaw in the V8...
CVE-2025-5281: Critical Chromium Browser Vulnerability Explained and Mitigation Steps
A newly discovered vulnerability in Chromium-based browsers, tracked as CVE-2025-5281, has sent shockwaves through the cybersecurity community. This high-severity flaw in the back-forward cache...
Firefox 139 Launches with Extension Translation, Custom Themes, and AI-Powered Link Previews
Mozilla Firefox 139 has arrived, and it’s not just another version bump. The update stakes out new ground with a long-overdue translation capability for extension pages, a rich set of new tab...
Bitwarden PDF XSS Flaw (CVE-2025-5138) Exposes Passwords: Users Urged to Patch Immediately
A critical cross-site scripting vulnerability in Bitwarden’s PDF file handling can allow attackers to hijack user vaults by simply uploading a malicious document. Tracked as CVE-2025-5138, the flaw...
Google Chrome's PermissionsAI: Revolutionizing User Experience by Minimizing Intrusive Pop-Ups
Introduction In an era where digital privacy and user experience are paramount, Google Chrome is taking significant strides to enhance browsing by introducing PermissionsAI. This innovative feature...
Microsoft unveils open-source NLWeb protocol at Build 2025 to turn any website into an AI-powered chatbot app
Introduction At the Build developer conference on May 19, 2025, Microsoft introduced NLWeb, an open protocol designed to revolutionize web interactivity by integrating AI-powered chatbots seamlessly...