tldrdailynews.com logo
Tag

Chromium

All articles tagged with #chromium

Leak of unfixed Chromium bug enables JavaScript after browser close
technology5 days ago

Leak of unfixed Chromium bug enables JavaScript after browser close

Google unintentionally exposed details of an unfixed Chromium vulnerability that can let a Service Worker keep executing JavaScript after the browser is closed, enabling remote code execution and potential botnet-like abuse across all Chromium-based browsers. Despite reports of a fix, researchers found the issue still exploitable in some builds, prompting urgent patching efforts and highlighting that attackers could exploit it with minimal user interaction; Google awarded a bug bounty, and the disclosure raised broad risk though it doesn’t grant access to emails or the host OS.

via BleepingComputer|
#botnet#browser#chromium
Public exploit for long-unpatched Chromium flaw threatens millions
technology5 days ago

Public exploit for long-unpatched Chromium flaw threatens millions

Google published exploit code for a long-unpatched Chromium vulnerability that uses the Browser Fetch API to trigger a persistent backdoor via malicious sites, potentially turning millions of Chromium-based browsers into a botnet; disclosed in 2022 and rated S1, the flaw remained unfixed for 29 months, affecting Chrome, Edge and other Chromium-based browsers while Firefox and Safari are unaffected.

via Ars Technica|
#chromium#cybersecurity#exploit
Edge halts in-memory loading of saved passwords at startup
technology10 days ago

Edge halts in-memory loading of saved passwords at startup

Microsoft Edge will stop loading saved passwords into process memory at startup after a researcher demonstrated that credentials stored in Edge’s built-in password manager could be decrypted on launch and dumped from Edge processes. Microsoft initially claimed this behavior was by design but now says a defense‑in‑depth fix will be applied across all Edge channels (including Canary); the change is already live in Edge Canary and will roll out to all supported builds (build 148+). The PoC showed that attackers with admin rights could access passwords from Edge processes, though the threat model did not always cover such cases, and the update aims to reduce in‑memory exposure and strengthen Edge security overall.

via BleepingComputer|
#chromium#edge#memory
Edge vs Chrome: Reddit users rate efficiency and ecosystem over sheer speed
technology22 days ago

Edge vs Chrome: Reddit users rate efficiency and ecosystem over sheer speed

Reddit users now judge browsers by efficiency, features, and OS integration rather than pure speed, with Edge favored for lower memory usage, better battery life, and tighter Windows 11 integration, while Chrome remains the go‑to for Google services and cross‑site compatibility; overall choice depends on your device and ecosystem, not just benchmarks.

via Windows Central|
#browser#chrome#chromium
technology2 months ago

Electron Embraces Wayland with Native Linux Support

Electron now ships with improved Wayland support on Linux, aligning with Chromium defaults and reducing reliance on XWayland. Upstream work on Chromium/CEF, plus dedicated Electron CI for Wayland, helps ensure compatibility, though some APIs differ from X11. Benefits include better color, HDR, and hardware-accelerated rendering, while features like client-side decorations remain areas for ongoing work.

via Phoronix|
#chromium#electron#linux
technology3 months ago

Chromium CSS zero-day CVE-2026-2441 appears in the wild

A zero-day use-after-free in Chromium’s CSS engine (CVE-2026-2441) has surfaced in the wild, potentially enabling heap corruption via crafted HTML and affecting Chromium-based browsers like Chrome, Edge, and Opera. The discussion centers on the vulnerability’s impact, possible exploit chains, and bug-bounty economics, with experts noting that attackers may combine a renderer bug with a sandbox escape for broader access. The thread also touches on how bug bounties compare to gray-market payouts for high-severity exploits and the reality that “in the wild” exploits often come with additional complications and risk for researchers.

via Hacker News|
#chromium#css#cve-2026-2441
Superfoods Reduce Blood Sugar, May Delay Insulin Need
health11 months ago

Superfoods Reduce Blood Sugar, May Delay Insulin Need

Research suggests that consuming superfoods rich in magnesium and chromium can help reduce blood sugar levels and insulin resistance, potentially lowering the need for insulin in managing type 2 diabetes. These minerals play vital roles in blood sugar regulation, and foods high in these nutrients include leafy greens, nuts, whole grains, and seafood. Lifestyle changes such as increasing fiber intake, staying hydrated, exercising regularly, and managing stress are also effective in controlling blood sugar levels. However, it's important to consult healthcare professionals before starting supplements, as evidence is still emerging.

via Surrey Live|
#blood-sugar#chromium#diabetes
"Chromium Contamination in Recalled Fruit Pouches Linked to Lead-Tainted Products"
health-food-safety2 years ago

"Chromium Contamination in Recalled Fruit Pouches Linked to Lead-Tainted Products"

The FDA has found chromium in recalled cinnamon applesauce pouches that were already found to contain extremely high levels of lead, which have poisoned nearly 300 young children in 37 states. The presence of chromium hints at economically motivated adulteration, as lead chromate, an artificial coloring, has been used in spices to conceal poor quality. The health implications of chromium exposure are uncertain, but the effects of lead poisoning on children's health can include learning and behavior problems, as well as hearing and speech issues. The FDA recommends that families of affected children inform their healthcare providers of potential chromium exposure, and the CDC has provided clinical guidance for doctors on how to test and care for children with exposure.

via Ars Technica|
#childrens-health#chromium#fda
Recalled Applesauce Pouches Exposed to Chromium, FDA Reports
health2 years ago

Recalled Applesauce Pouches Exposed to Chromium, FDA Reports

The FDA found high levels of chromium in recalled applesauce products linked to lead poisoning cases, prompting concerns about potential chromium exposure. The products, including cinnamon, were manufactured by Austrofood and distributed by WanaBana LLC. The FDA has expanded its investigation and warned that symptoms of chromium exposure may be nonspecific, with potential health effects including abdominal pain, nausea, vomiting, diarrhea, anemia, and renal and hepatic dysfunction.

via Fox Business|
#chromium#fda#food-contamination
"FDA Updates on Lead and Chromium in Recalled Applesauce"
health2 years ago

"FDA Updates on Lead and Chromium in Recalled Applesauce"

Recalled cinnamon applesauce pouches linked to lead poisoning in U.S. children were found to contain a high level of chromium, a potentially toxic substance, in addition to lead, according to the FDA. The pouches, sold under the WanaBana, Schnucks, and Weis brands, may still be in consumers' homes due to their long shelf life. The CDC reported 287 lead poisoning cases from 37 states, with the median age of those affected being 1. Consumers are advised not to eat or serve the pouches and to discard them, and anyone who consumed them should consult a healthcare provider.

via WTOP|
#applesauce-pouches#chromium#contamination