All articles tagged with #chromium
Microsoft has announced plans to optimize Windows 11 for PCs with 8GB of RAM by reducing the operating system's memory footprint and tuning WinUI 3, Chromium, and WebView2 for lower memory use, aiming to deliver a faster, more responsive experience amid AI-driven RAM demand.
Google unintentionally exposed details of an unfixed Chromium vulnerability that can let a Service Worker keep executing JavaScript after the browser is closed, enabling remote code execution and potential botnet-like abuse across all Chromium-based browsers. Despite reports of a fix, researchers found the issue still exploitable in some builds, prompting urgent patching efforts and highlighting that attackers could exploit it with minimal user interaction; Google awarded a bug bounty, and the disclosure raised broad risk though it doesn’t grant access to emails or the host OS.
Google published exploit code for a long-unpatched Chromium vulnerability that uses the Browser Fetch API to trigger a persistent backdoor via malicious sites, potentially turning millions of Chromium-based browsers into a botnet; disclosed in 2022 and rated S1, the flaw remained unfixed for 29 months, affecting Chrome, Edge and other Chromium-based browsers while Firefox and Safari are unaffected.
Microsoft Edge will stop loading saved passwords into process memory at startup after a researcher demonstrated that credentials stored in Edge’s built-in password manager could be decrypted on launch and dumped from Edge processes. Microsoft initially claimed this behavior was by design but now says a defense‑in‑depth fix will be applied across all Edge channels (including Canary); the change is already live in Edge Canary and will roll out to all supported builds (build 148+). The PoC showed that attackers with admin rights could access passwords from Edge processes, though the threat model did not always cover such cases, and the update aims to reduce in‑memory exposure and strengthen Edge security overall.
Reddit users now judge browsers by efficiency, features, and OS integration rather than pure speed, with Edge favored for lower memory usage, better battery life, and tighter Windows 11 integration, while Chrome remains the go‑to for Google services and cross‑site compatibility; overall choice depends on your device and ecosystem, not just benchmarks.
Electron now ships with improved Wayland support on Linux, aligning with Chromium defaults and reducing reliance on XWayland. Upstream work on Chromium/CEF, plus dedicated Electron CI for Wayland, helps ensure compatibility, though some APIs differ from X11. Benefits include better color, HDR, and hardware-accelerated rendering, while features like client-side decorations remain areas for ongoing work.
A zero-day use-after-free in Chromium’s CSS engine (CVE-2026-2441) has surfaced in the wild, potentially enabling heap corruption via crafted HTML and affecting Chromium-based browsers like Chrome, Edge, and Opera. The discussion centers on the vulnerability’s impact, possible exploit chains, and bug-bounty economics, with experts noting that attackers may combine a renderer bug with a sandbox escape for broader access. The thread also touches on how bug bounties compare to gray-market payouts for high-severity exploits and the reality that “in the wild” exploits often come with additional complications and risk for researchers.
Chrome/Chromium has reenabled JPEG-XL support in the latest codebase, wiring a Rust-based jxl-rs decoder behind the enable_jxl_decoder flag and a runtime chrome://flags setting (image/jxl) in Chromium 145.0.7632.0.
OpenAI has launched ChatGPT Atlas, a macOS-only Chromium-based browser that integrates ChatGPT with features like browsing history recall and browser memories to enhance user experience, with support for extensions and customization, but no Windows version announced yet.
OpenAI is developing a Chromium-based AI-powered browser, potentially launching on macOS, that integrates ChatGPT features like agent mode and offers new browsing capabilities such as AI-driven tab management and browsing automation, aiming to compete with Google Chrome.
OpenAI is planning to launch an AI-powered web browser in the coming weeks, featuring a native ChatGPT interface and integrated with Google's Chromium engine, potentially enabling tasks like reservations and form filling through an 'agentic' AI, which could challenge Google's dominance and expand OpenAI's AI ecosystem.
OpenAI is close to launching its own web browser within weeks, featuring a ChatGPT-style chatbot and agentic AI capabilities, aiming to integrate more deeply into users' lives and capture user data, potentially challenging established browsers like Chrome, which is built on Chromium and currently dominates the market.
Research suggests that consuming superfoods rich in magnesium and chromium can help reduce blood sugar levels and insulin resistance, potentially lowering the need for insulin in managing type 2 diabetes. These minerals play vital roles in blood sugar regulation, and foods high in these nutrients include leafy greens, nuts, whole grains, and seafood. Lifestyle changes such as increasing fiber intake, staying hydrated, exercising regularly, and managing stress are also effective in controlling blood sugar levels. However, it's important to consult healthcare professionals before starting supplements, as evidence is still emerging.
The FDA has found chromium in recalled cinnamon applesauce pouches that were already found to contain extremely high levels of lead, which have poisoned nearly 300 young children in 37 states. The presence of chromium hints at economically motivated adulteration, as lead chromate, an artificial coloring, has been used in spices to conceal poor quality. The health implications of chromium exposure are uncertain, but the effects of lead poisoning on children's health can include learning and behavior problems, as well as hearing and speech issues. The FDA recommends that families of affected children inform their healthcare providers of potential chromium exposure, and the CDC has provided clinical guidance for doctors on how to test and care for children with exposure.
The FDA found high levels of chromium in recalled applesauce products linked to lead poisoning cases, prompting concerns about potential chromium exposure. The products, including cinnamon, were manufactured by Austrofood and distributed by WanaBana LLC. The FDA has expanded its investigation and warned that symptoms of chromium exposure may be nonspecific, with potential health effects including abdominal pain, nausea, vomiting, diarrhea, anemia, and renal and hepatic dysfunction.