Join Nostr
2026-10-03 03:17:16 UTC

ssvc on Nostr: Google Chrome published an empty blog post as a security advisory on Thursday ...

Google Chrome published an empty blog post as a security advisory on Thursday afternoon. They filled it out in the past day, but don't make it easy to grasp the severity of their bugs.

For example, "Critical CVE-2026-103628: Out of bounds write in WebGL." is actually a CVSSv3.1: **9.6 critical** because it allows a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. You'd have to chase down those details yourself on cve.org or elsewhere.

https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop.html

#google #chrome #CVE