project
Open-source browser project led by Google providing the rendering and V8 JavaScript engine that powers Chrome, Edge, Brave, and other browsers.
No evidence-backed relationships are recorded.
PNG-8 at 124 colors encoded a red-text test poster in 48,481 bytes at an edge error of 0.13 Delta E, smaller and cleaner than every JPEG export. For flat graphics like this one, an export tool that converts everything to JPEG ships bigger files with dirtier red text.
Reality
TECH VEDA counts 36 actionable device CVEs across 14 non-kernel packages in September, two of them Chromium V8 bugs on CISA's exploited list. How many apply to a given fleet depends on each image's SBOM and on which scorer a team trusts.
Reality
Engineers testing six Angular scenarios found user-event clicks passed a button covered by a decorative layer, even in headless Chromium. Only a Playwright provider click or a separate elementFromPoint hit test caught it.
Reality
Chromium 149 canvas JPEGs grew 2.25x from quality 0.80 to 0.99 while red-text edge error fell only from 8.11 to 6.35, one developer measured. Firefox drops chroma subsampling at a lower setting, so the reviewer's browser decides whether the fringe shows.
Reality
Sorting a million-row CSV in an Electron renderer took over a minute, 140x slower than the same code in a Node script, its developer found. The slowdown showed up only in a renderer already holding a large file, so a profile taken there was the only way to find it.
Reality
Git 2.56 adds a staging flag that aborts on leftover conflict markers and cuts one Chromium diff from about eight minutes to 0.07 seconds. Teams get the speed by upgrading, but they get the safety only by editing the scripts their developers and coding agents run.
Reality
Chrome 152 keeps google.com's cookies and storage after 'delete on close' is switched on, developer Jeff Johnson found. Google fixed a similar exemption in 2020, and the same behaviour in open-source Chromium means other browsers and test rigs need their own check.
Reality
OpenSourceMalware flagged the campaign on August 15, 2026. The install hook fakes a clean native build while pulling a Windows stealer that goes after browser credentials and crypto wallets.
Reality
Abnormal says iAuthFlow v2 uses a phished Google session to register an operator-controlled passkey. The standard playbook of revoking sessions and resetting the password does not remove it.
Perspective Coverage
3 publishersReality
SOCRadar says the toolkit needs administrative or code execution access first, then writes itself into Chrome and Edge profiles with integrity values the browser accepts and bridges to a native host binary that runs shell commands.
Reality
CVE-2026-87491 gives a crafted web page code execution inside Chrome's sandbox. The fix only takes effect when the browser restarts, and long-running sessions carry that exposure until they do.
Perspective Coverage
5 publishersReality
Proofpoint says at least four China-linked espionage groups fired the same BlueMoon code at different victims during the four weeks a Chromium fix took to reach stable Chrome, and two more groups probably did too.
Perspective Coverage
9 publishersReality
RoamProxy's extension mints a new proxy hostname on every save because Firefox and Edge kept reusing connections authenticated with the old username. Any gateway that routes by username on one host and port hits the same silent failure.
Reality
Gen Digital found the chain while working a live UNC3569 intrusion. Tencent's April 2026 fix closed the link handler and left the bundled Chromium 80 in place, with its sandbox still switched off in the code.
Perspective Coverage
3 publishersReality
Volexity attributes September 1 spear-phishing at multiple NGOs to the Chinese cluster UTA0560. The chain used two Chrome flaws and one in Windows ALPC, and a second China-nexus actor ran the same chain.
Reality
third-party.com is an ordinary registered domain that developer documentation has used as a stand-in for years. It currently answers with a fake Cloudflare check that tells Windows users to paste a PowerShell command into the Run box.
Reality
Miraiclip takes edits only as dispatched commands, keeps a microsecond-precision timeline and a full history, and emits every change as an RFC-6902 JSON patch. Everything a user touches, you write yourself.
Reality
getImageData can only ever read pixels your own code painted, and the screen-capture workaround reaches the rest of the display only with a permission prompt and a recording banner. Chromium has shipped window.EyeDropper since late 2021.
Reality
Browser-use's perception pass strips scripts and hidden nodes, then paints numbered badges on a screenshot so the model clicks by index instead of by XPath. The teardown puts action precision above 95% per action.
Reality
A dev.to teardown argues static IP blocklists cannot survive CGNAT and 100,000-address proxy pools, so edge defence moves to the fields a kernel writes into the first SYN: initial window, MSS, option ordering.
Reality
Build · September 18, 2026 · 1 publisher
Build · September 18, 2026 · 1 publisher
Build · September 18, 2026 · 1 publisher
Build · September 18, 2026 · 1 publisher
Build · September 17, 2026 · 1 publisher
Security · September 16, 2026 · 1 publisher
Security · September 16, 2026 · 1 publisher
Security · September 15, 2026 · 1 publisher
Build · September 16, 2026 · 1 publisher
Leadership · September 15, 2026 · 1 publisher
Security · September 15, 2026 · 1 publisher
Build · September 15, 2026 · 1 publisher
Build · September 13, 2026 · 1 publisher
Security · September 12, 2026 · 1 publisher
Product · September 11, 2026 · 1 publisher
Build · September 11, 2026 · 1 publisher
Product · September 10, 2026 · 2 publishers
Build · September 11, 2026 · 1 publisher
Build · September 10, 2026 · 1 publisher
Security · September 9, 2026 · 1 publisher
Build · September 8, 2026 · 1 publisher
Security · September 4, 2026 · 9 publishers
Build · September 5, 2026 · 1 publisher
Build · August 30, 2026 · 1 publisher
Build · August 28, 2026 · 1 publisher
Build · August 27, 2026 · 1 publisher
Build · August 27, 2026 · 1 publisher
Build · August 27, 2026 · 1 publisher
Security · August 26, 2026 · 2 publishers
Build · August 26, 2026 · 1 publisher
Product · August 25, 2026 · 1 publisher
Build · August 25, 2026 · 1 publisher
Build · August 25, 2026 · 1 publisher
Build · August 24, 2026 · 1 publisher
Build · August 24, 2026 · 1 publisher
Build · August 23, 2026 · 1 publisher
Build · August 22, 2026 · 1 publisher
Build · August 22, 2026 · 1 publisher
Build · August 22, 2026 · 1 publisher
Build · August 16, 2026 · 1 publisher