Cybersecurity News
Filters
Filtered by tag: memory corruption × Clear
Google Releases Massive Chrome Security Update Fixing 353 Flaws, Including 6 Critical Vulnerabilities
Matched: Claude, OpenAI
Google released Chrome 156 on October 20, 2026, patching 353 security flaws, including six critical vulnerabilities in Skia, Accessibility, CSS, Paint, and WebRTC. Five involve memory corruption and one is a use-after-free bug. No active exploitation has been confirmed. AI tools were credited alongside researchers in some discoveries. Users should update via Help > About Google Chrome and restart the browser to apply fixes.
When Agentic Glue Melts: Exploiting Cloudflare Code Mode and Workers
Check Point Research found five memory-corruption bugs in workerd, the C++ runtime underlying Cloudflare Workers and Code Mode. By targeting this shared layer, researchers broke both products simultaneously. The flaws exist in native "glue" code bridging V8 and Cloudflare's sandbox, which relies entirely on V8 for isolation. The vulnerabilities allowed sandbox escape from what should be isolated untrusted code execution environments.