Google Chrome

The UK Competition and Markets Authority has revised its plan for Google, proposing a 12-slot search choice screen for Android and Chrome users that would include AI assistants alongside traditional search engines. The proposal also requires clear attribution of publisher sources. It signals UK regulators moving to extend choice-screen remedies beyond search into the AI era.

Mozilla's head of Firefox says a major redesign is central to the browser's push to win users back from Google Chrome. In an interview with Ars Technica, he outlined product priorities and voiced skepticism about cramming AI into every feature, arguing Firefox should focus on speed, simplicity and offering users a genuine alternative in a browser market dominated by Chromium-based rivals.

Apple has released version 3.4.0 of its iCloud Passwords extension for Google Chrome, bringing improvements to the PIN entry and verification process used when autofilling saved passwords. The update was highlighted by German tech blog Caschys Blog, which covers Apple and software news. The extension lets Chrome users on Windows access passwords stored in their iCloud Keychain.

A critical vulnerability, EUVD-2026-89143, has been disclosed in Google Chrome with a CVSS score of 9.6. The flaw involves non-heap memory handling in the browser's Fonts component and could allow a remote attacker, working alongside social engineering, to potentially compromise systems. The fix is included in Chrome 154.0.8037.57, published 29 September 2026 and updated the following day. Security watchers are flagging the severity rating and urging users to update their browsers promptly.

Apple has released version 3.4.0 of its iCloud Passwords extension for Google Chrome, bringing improvements to PIN handling. The update refines how users verify their identity when accessing saved passwords from the browser, part of Apple's effort to make its password manager usable outside its own ecosystem. German tech readers are picking up the news from the report on the release.

GLM-5.3, an open artificial intelligence model from China, reportedly built an exploit for Google's Chrome browser at a cost of about $20. The claim is drawing attention because it shows a low-cost, openly available model capable of producing working attack code, raising fresh concerns about AI-enabled cyberattacks and the security of widely used browsers.

A critical vulnerability, tracked as CVE-2026-95281, has been disclosed in Google Chrome on Android. The buffer overflow in the ANGLE graphics library, carrying a CVSS score of 9.6, affected Chrome versions before 154.0.8037.57 and could let a remote attacker run arbitrary code outside the sandbox through a crafted HTML page. Security researchers are urging Android users to update Chrome immediately.

Google released Chrome 154, patching 32 security vulnerabilities, one of which is rated Critical. Microsoft Edge, which is built on the same Chromium engine, followed with its own update incorporating the fixes. The release matters because Chrome flaws are frequently exploited, so users are advised to update their browsers promptly.

A critical vulnerability, CVE-2026-95357, has been disclosed affecting Google Chrome on Android versions prior to 154.0.8037.57. The out-of-bounds write in the GPU component carries a CVSS score of 9.6 and could let a remote attacker execute arbitrary code outside the browser sandbox via a crafted HTML page. Security experts are urging users to update Chrome immediately.

Security researchers are flagging CVE-2026-95356, a critical use-after-free flaw in the WindowDialog component of Google Chrome. Versions prior to 154.0.8037.57 are affected. The bug carries a CVSS score of 9.6 and could let a remote attacker, using social engineering and a crafted HTML page, run arbitrary code outside the browser sandbox. Users are being urged to update Chrome promptly.

A critical vulnerability, CVE-2026-95350, has been disclosed in Google Chrome on Android. The buffer overflow in ANGLE, affecting versions before 154.0.8037.57, carries a CVSS score of 9.6 and could let a remote attacker execute arbitrary code outside the browser sandbox via a crafted HTML page. Chromium rates it Critical. Users are urged to update Chrome on Android to the latest version.

A critical vulnerability, CVE-2026-95349, has been disclosed in Google Chrome on Android. The buffer overflow in WebGL, rated CVSS 9.6, affects versions prior to 154.0.8037.57 and could let a remote attacker run arbitrary code outside the sandbox through a crafted HTML page. Chromium has classified the flaw as a critical security issue, and users are urged to update their browsers promptly.