Accessibility. A privacy issue was addressed by removing sensitive data.

Accessibility. A logic issue was addressed with improved checks.

Chromium: CVE-2026-2441 Use after free in CSS

In ParsePayloads of AudioSdpParser.cpp, there is a possible memory corruption due to type confusion. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Palo Alto Networks incorporated the following Chromium security fixes into our products:

https://chromereleases.googleblog.com/2025/10/stable-channel-update-for-desktop28.html

Palo Alto Networks incorporated the following Chromium security fixes into our products:

https://chromereleases.googleblog.com/2025/06/extended-stable-updates-for-desktop.html https://chromereleases.googleblog.com/2025/06/extended-stable-updates-for-desktop.html https://chromereleases.googleblog.com/2025/06/extended-stable-updates-for-desktop.htmlhttps://chromereleases.googleblog.com/2025/06/extended-stable-updates-for-desktop.html  https://chromereleases.googleblog.com/2025/06/stable-channel-update-for-desktop.html https://chromereleases.googleblog.com/2025/05/extended-stable-updates-for-desktop.html https://chromereleases.googleblog.com/2025/05/stable-channel-update-for-desktop27.html https://chromereleases.googleblog.com/2025/05/stable-channel-update-for-desktop14.html

Additionally, a vulnerability in Prisma Browser was also addressed.

Chromium: CVE-2023-1531 Use after free in ANGLE

The Fonts implementation in Google Chrome before 40.0.2214.91 does not initialize memory for a data structure, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.