Forwarded from the National Institute of Cyber Security NISAC-200-202605-00000009

Researchers have discovered that Chromium-based browsers, including Google Chrome, Microsoft Edge, Vivaldi, and Brave, contain 79 high-risk security vulnerabilities (CVE-2026-8509 to CVE-2026-8587). The vulnerability types include Use After Free and Heap-based Buffer Overflow. The most severe vulnerabilities may allow unauthenticated remote attackers to induce users to open specially crafted HTML pages, thereby escaping the browser sandbox environment. Please confirm and apply patches as soon as possible.

Intelligence Sharing Level: WHITE (the intelligence content is information that may be publicly disclosed)

[Reference]

1. https://support.google.com/chrome/answer/95414?hl=zh-Hant
2. https://support.microsoft.com/zh-tw/topic/microsoft-edge-%E6%9B%B4%E6%96%B0%E8%A8%AD%E5%AE%9A-af8aaca2-1b69-4870-94fe-18822dbb7ef1
3. https://help.vivaldi.com/desktop/install-update/update-vivaldi/
4. https://community.brave.com/t/how-to-update-brave/384780
5. https://chromereleases.googleblog.com/2026/05/stable-channel-update-for-desktop_12.html
6. https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-8509
7. https://vivaldi.com/blog/desktop/minor-update-nine-7-10/
8. https://brave.com/latest/