Security Alerts
The latest Security Alerts coverage — news, analysis, and updates from the WindowsNews.AI desk.
Critical Chrome Vulnerability CVE-2026-11689 Exposes Saved Passwords on Windows: Patch Available
Google has patched a high-severity vulnerability in Chrome’s built-in password manager that could allow attackers to bypass site isolation after compromising the renderer process. The flaw, tracked...
Google Patches High-Severity MediaCapture Flaw CVE-2026-11685 in Chrome 149: What Windows Users Need to Know
Google on June 8, 2026 shipped a critical update for its Chrome browser, patching a high-severity vulnerability that exposes macOS users to potential audio and video eavesdropping. The flaw,...
High-Severity SVG Flaw in Google Chrome Patched: CVE-2026-11688 Enables Sandboxed Code Execution
Google has released an emergency security update for its Chrome browser to address a high-severity vulnerability in the browser's SVG rendering engine. Tracked as CVE-2026-11688, the flaw allows a...
Chrome 149 Ships Emergency Fix for macOS Zero-Day Allowing Cross-Origin Data Theft via WebGPU
Google has pushed out Chrome 149.0.7827.103 for macOS to patch a high-severity zero-day vulnerability that could allow a compromised renderer process to steal sensitive data from other websites, the...
Chrome's WebGPU Engine Fixes High-Risk Use-After-Free Exploit (CVE-2026-11687)
Google has rolled out a critical patch for Chrome on macOS, addressing a high-severity vulnerability tracked as CVE-2026-11687 that could allow remote attackers to execute arbitrary code via heap...
Google Patches High-Severity Chrome Flaw Leaking Cross-Origin Data (CVE-2026-11684)
Google released a critical security update for Chrome on June 8, 2026, addressing a high-severity vulnerability tracked as CVE-2026-11684. The flaw, nestled within Chromium’s Network component,...
Update Chrome Now: High-Severity WebCodecs Bug (CVE-2026-11683) Exposes Users to Remote Attacks
{ "title": "Update Chrome Now: High-Severity WebCodecs Bug (CVE-2026-11683) Exposes Users to Remote Attacks", "content": "Google rolled out Chrome 149.0.7827.103 on June 8, 2026, patching a...
High-Severity Use-After-Free Flaw in Chrome Media Patched for Windows – Update Now
Google rolled out an urgent security fix for Chrome on Windows on June 8, 2026, neutralizing a high-severity use-after-free vulnerability in the browser’s Media component. Tracked as...
Chrome 149.0.7827.103 Fixes Critical Linux Sandbox Escape: CVE-2026-11682 Patch Details and CPE Clarifications
Google has released an out-of-band patch for a critical sandbox escape vulnerability in Chrome for Linux, tracked as CVE-2026-11682, that could let attackers break out of the browser’s security...
Linux Users Must Update Chrome Now: Google Patches CVE-2026-11681 Heap Corruption
Google disclosed CVE-2026-11681 on June 8, 2026, a high-severity heap corruption vulnerability in the Linux version of Chrome that allows remote attackers to potentially hijack systems through...
Critical Chrome Codecs Flaw Enables Windows Sandbox Escape — Update to 149.0.7827.103 Immediately
A single use-after-free bug in Chrome’s multimedia codecs can shatter the browser’s vaunted sandbox on Windows, and the fix is here. On June 8, 2026, the National Vulnerability Database published...
Chrome Build 149.0.7827.103 Seals High-Risk Memory Leak: CVE-2026-11678 Integer Overflow in libyuv Patched
Google shipped an urgent stable channel update for Chrome on June 8, 2026, closing a high-severity integer overflow vulnerability that could leak heap memory through nothing more than a maliciously...