Vulnerability (CVE)
Microsoft released its first security update of 2026 on Tuesday, fixing 114 flaws in Windows, of which eight are rated Critical and 106 Important, with 58 classified as privilege escalation, 22 information disclosure, 21 remote code execution, and five...
Google patched CVE-2026-0628, a CVSS 8.8 insufficient policy enforcement flaw in Chrome's WebView tag, in version 143.0.7499.192/.193 for Windows/Mac and 143.0.7499.192 for Linux in early January 2026. Palo Alto Networks Unit 42 researcher Gal Weizman, who...
Forever Security researchers demonstrated that a single browser extension with two common permissions could take control of the built-in AI assistants in Gemini Live in Chrome, Perplexity Comet, Microsoft Edge, Opera Neon and the Claude in Chrome...
Unit 42 found a High severity vulnerability, CVE-2026-0628, in Chrome's Gemini feature that let extensions with basic permissions use the declarativeNetRequests API to inject JavaScript into the Gemini panel and gain its privileged access to local files,...