FileZilla Server 1.12.5 released
Bugfixes and minor changes:
- FTP: Fixed a crash when transfers are aborted
The Stable channel has been updated to 146.0.7680.153/154 for Windows/MacΒ andΒ 146.0.7680.153 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in theΒ Log
Security Fixes and Rewards
Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but havenβt yet fixed.
This update includes 26 security fixes. Please see the Chrome Security Page for more information.
[TBD][475877320] Critical CVE-2026-4439: Out of bounds memory access in WebGL. Reported by Goodluck on 2026-01-15
[TBD][485935305] Critical CVE-2026-4440: Out of bounds read and write in WebGL. Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-02-20
[TBD][489381399] Critical CVE-2026-4441: Use after free in Base. Reported by Google on 2026-03-03
[TBD][484751092] High CVE-2026-4442: Heap buffer overflow in CSS. Reported by Syn4pse on 2026-02-16
[TBD][485292589] High CVE-2026-4443: Heap buffer overflow in WebAudio. Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-02-18
[TBD][486349161] High CVE-2026-4444: Stack buffer overflow in WebRTC. Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-02-21
[TBD][486421953] High CVE-2026-4445: Use after free in WebRTC. Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-02-22
[TBD][486421954] High CVE-2026-4446: Use after free in WebRTC. Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-02-22
[TBD][486657483] High CVE-2026-4447: Inappropriate implementation in V8. Reported by Erge on 2026-02-23
[TBD][486972661] High CVE-2026-4448: Heap buffer overflow in ANGLE. Reported by M. Fauzan Wijaya (Gh05t666nero) on 2026-02-23
[TBD][487117772] High CVE-2026-4449: Use after free in Blink. Reported by Syn4pse on 2026-02-24
[TBD][487746373] High CVE-2026-4450: Out of bounds write in V8. Reported by qymag1c on 2026-02-26
[TBD][487768779] High CVE-2026-4451: Insufficient validation of untrusted input in Navigation. Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-02-26
[TBD][487977696] High CVE-2026-4452: Integer overflow in ANGLE. Reported by cinzinga on 2026-02-26
[TBD][488400770] High CVE-2026-4453: Integer overflow in Dawn. Reported by sweetchip on 2026-02-27
[TBD][488585488] High CVE-2026-4454: Use after free in Network. Reported by heapracer (@heapracer) on 2026-03-01
[TBD][488585504] High CVE-2026-4455: Heap buffer overflow in PDFium. Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-03-01
[TBD][488617440] High CVE-2026-4456: Use after free in Digital Credentials API. Reported by sean wong on 2026-02-28
[TBD][488803413] High CVE-2026-4457: Type Confusion in V8. Reported by Zhenpeng (Leo) Lin at depthfirst on 2026-03-01
[TBD][489619753] High CVE-2026-4458: Use after free in Extensions. Reported by Shaheen Fazim on 2026-03-04
[TBD][490246422] High CVE-2026-4459: Out of bounds read and write in WebAudio. Reported by Jihyeon Jeong (Compsec Lab, Seoul National University / Research Intern) on 2026-03-06
[TBD][490254124] High CVE-2026-4460: Out of bounds read in Skia. Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-03-06
[TBD][490558172] High CVE-2026-4461: Inappropriate implementation in V8. Reported by Google on 2026-03-07
[TBD][491080830] High CVE-2026-4462: Out of bounds read in Blink. Reported by heapracer (@heapracer) on 2026-03-09
[TBD][491358681] High CVE-2026-4463: Heap buffer overflow in WebRTC. Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-03-10
[TBD][487208468] Medium CVE-2026-4464: Integer overflow in ANGLE. Reported by heesun on 2026-02-24
We would also like to thank all security researchers that worked with us during the development cycle to prevent security bugs from ever reaching the stable channel.
Many of our security bugs are detected using AddressSanitizer, MemorySanitizer, UndefinedBehaviorSanitizer, Control Flow Integrity, libFuzzer, or AFL.
Interested in switching release channels? Find out howΒ here. If you find a new issue, please let us know byΒ filing a bug. TheΒ community help forumΒ is also a great place to reach out for help or learn about common issues.
Srinivas Sista
The Stable channel has been updated to 146.0.7680.80 for Windows/MacΒ andΒ 146.0.7680.80 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in theΒ Log
Security Fixes and Rewards
Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but havenβt yet fixed.
This update includes 1 security fix. Please see the Chrome Security Page for more information.
[N/A][491421267] High CVE-2026-3909: Out of bounds write in Skia. Reported by Google Threat Analysis Group on 2026-03-10
Google is aware that an exploit for CVE-2026-3909 exists in the wild.
We would also like to thank all security researchers that worked with us during the development cycle to prevent security bugs from ever reaching the stable channel.
Many of our security bugs are detected using AddressSanitizer, MemorySanitizer, UndefinedBehaviorSanitizer, Control Flow Integrity, libFuzzer, or AFL.
Interested in switching release channels? Find out howΒ here. If you find a new issue, please let us know byΒ filing a bug. TheΒ community help forumΒ is also a great place to reach out for help or learn about common issues.
Srinivas Sista
The Stable channel has been updated to 146.0.7680.75/76 for Windows/MacΒ andΒ 146.0.7680.75Β for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in theΒ Log
Security Fixes and Rewards
Updated 2026-03-13: The previous version of these notes included CVE-2026-3909, the fix
for which will instead be available in a future update.
Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but havenβt yet fixed.
This update includes 1 security fix. Please see the Chrome Security Page for more information.Interested in switching release channels? Find out howΒ here. If you find a new issue, please let us know byΒ filing a bug. TheΒ community help forumΒ is also a great place to reach out for help or learn about common issues.
Srinivas Sista
The Chrome team is delighted to announce the promotion of Chrome 146 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks.
Security Fixes and Rewards
Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but havenβt yet fixed.
This update includes 29 security fixes. Please see the Chrome Security Page for more information.
[$33000][483445078] Critical CVE-2026-3913: Heap buffer overflow in WebML. Reported by Tobias Wienand on 2026-02-10
[$43000][481776048] High CVE-2026-3914: Integer overflow in WebML. Reported by cinzinga on 2026-02-04
[$43000][483971526] High CVE-2026-3915: Heap buffer overflow in WebML. Reported by Tobias Wienand on 2026-02-12
[$36000][482828615] High CVE-2026-3916: Out of bounds read in Web Speech. Reported by Grischa Hauser on 2026-02-09
[$11000][483569512] High CVE-2026-3917: Use after free in Agents. Reported by Syn4pse on 2026-02-11
[$10000][483853103] High CVE-2026-3918: Use after free in WebMCP. Reported by Syn4pse on 2026-02-12
[$2000][444176961] High CVE-2026-3919: Use after free in Extensions. Reported by Huinian Yang (@vmth6) of Amber Security Lab, OPPO Mobile Telecommunications Corp. Ltd. on 2025-09-10
[TBD][482875307] High CVE-2026-3920: Out of bounds memory access in WebML. Reported by Google on 2026-02-09
[TBD][484946544] High CVE-2026-3921: Use after free in TextEncoding. Reported by Pranamya Keshkamat & Cantina.xyz on 2026-02-17
[TBD][485397139] High CVE-2026-3922: Use after free in MediaStream. Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-02-18
[TBD][485935314] High CVE-2026-3923: Use after free in WebMIDI. Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-02-20
[TBD][487338366] High CVE-2026-3924: Use after free in WindowDialog. Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-02-25
[$10000][418214610] Medium CVE-2026-3925: Incorrect security UI in LookalikeChecks. Reported by NDevTK and Alesandro Ortiz on 2025-05-17
[$7000][478659010] Medium CVE-2026-3926: Out of bounds read in V8. Reported by qymag1c on 2026-01-26
[$3000][474948986] Medium CVE-2026-3927: Incorrect security UI in PictureInPicture. Reported by Barath Stalin K on 2026-01-11
[$2000][435980394] Medium CVE-2026-3928: Insufficient policy enforcement in Extensions. Reported by portsniffer443 on 2025-08-03
[$2000][477180001] Medium CVE-2026-3929: Side-channel information leakage in ResourceTiming. Reported by Povcfe of Tencent Security Xuanwu Lab on 2026-01-20
[$1000][476898368] Medium CVE-2026-3930: Unsafe navigation in Navigation. Reported by Povcfe of Tencent Security Xuanwu Lab on 2026-01-19
[TBD][417599694] Medium CVE-2026-3931: Heap buffer overflow in Skia. Reported by Huinian Yang (@vmth6) of Amber Security Lab, OPPO Mobile Telecommunications Corp. Ltd. on 2025-05-14
[TBD][478296121] Medium CVE-2026-3932: Insufficient policy enforcement in PDF. Reported by Ayato Shitomi on 2026-01-23
[TBD][478783560] Medium CVE-2026-3934: Insufficient policy enforcement in ChromeDriver. Reported by Povcfe of Tencent Security Xuanwu Lab on 2026-01-26
[TBD][479326680] Medium CVE-2026-3935: Incorrect security UI in WebAppInstalls. Reported by Barath Stalin K on 2026-01-28
[TBD][481920229] Medium CVE-2026-3936: Use after free in WebView. Reported by Am4deu$ on 2026-02-05
[$3000][473118648] Low CVE-2026-3937: Incorrect security UI in Downloads. Reported by Abhishek Kumar on 2026-01-03
[$2000][474763968] Low CVE-2026-3938: Insufficient policy enforcement in Clipboard. Reported by vicevirus on 2026-01-10
[$1000][40058077] Low CVE-2026-3939: Insufficient policy enforcement in PDF. Reported by NDevTK on 2021-11-30
[$1000][470574526] Low CVE-2026-3940: Insufficient policy enforcement in DevTools. Reported by Jorian Woltjer, Mian, bug_blitzer on 2025-12-21
[$1000][474670215] Low CVE-2026-3941: Insufficient policy enforcement in DevTools. Reported by Lyra Rebane (rebane2001) on 2026-01-10
[N/A][475238879] Low CVE-2026-3942: Incorrect security UI in PictureInPicture. Reported by Barath Stalin K on 2026-01-12
We would also like to thank all security researchers that worked with us during the development cycle to prevent security bugs from ever reaching the stable channel.
Interested in switching release channels? Find out howΒ here. If you find a new issue, please let us know byΒ filing a bug. TheΒ community help forumΒ is also a great place to reach out for help or learn about common issues.
Srinivas Sista
Google Chrome
Fixed an issue where searches entered in the Firefox Home search field were incorrectly redirected to the address bar for some users who had disabled search handoff behavior via advanced settings. (Bug 2017049)
Fixed an issue where some web-based rich text editors stopped applying formatting, such as bold or italic. (Bug 2020927)
Fixed an issue where videos could autoplay unexpectedly on YouTube despite autoplay being blocked, particularly impacting screen reader users. (Bug 2020233)
Fixed an issue that caused some absolutely positioned elements meant to be centered, for example, using margin: auto with inset: 0, to appear left-aligned on initial load. (Bug 2017440)
Fixed an issue where the βSwitch to Tabβ suggestion in the address bar appeared blank for pages without a title. (Bug 2020341)
Fixed an issue that could reduce video quality on Windows systems using NVIDIA GPUs with Video Super Resolution enabled. (Bug 2019515)
Various security fixes.
Reference link to 148.0 release notes.

ci: bump version for v12.16 release
ci: bump version for v12.15.0.7171
This is a small update that adds a new translation (Kazakh) and updates the bundled DDS and JPEG XL FileType plugins to their latest versions.
There are two releases of Paint.NET:
Changes since 5.1.11:

This is a hotfix for 5.1.10 that fixes the DxgiAdapterService, which is used by plugins that initialize DirectX using their own interop.
The 5.1.10 update was a maintenance release that added a Romanian translation, fixed some important bugs, and updated the bundled FileType plugins.
There are two releases of Paint.NET:
Changes since 5.1.10:
Changes in 5.1.10 that were new since 5.1.9:

This is a maintenance release that adds a Romanian translation, fixes some important bugs, and updates the bundled FileType plugins.
There are two releases of Paint.NET:
Changes since 5.1.9:

This is a maintenance release that adds a Bulgarian translation and fixes some important bugs.
There are two releases of Paint.NET:
Changes since 5.1.8:

This is a simple maintenance release that mostly fixes a few small bugs, and updates the bundled DDS FileType plugin.
There are two releases of Paint.NET:
Changes since 5.1.7:

This is a hotfix for brush rendering to not occasionally have segments that are drawn twice.
The 5.1.6 update was a hotfix for a memory leak, and also updated the bundled JPEG XL plugin to fix a crash on ARM64.
The 5.1.5 update added JPEG XL (*.jxl) support, improved quantization color quality, updated AVIF loading to better handle mapping HDR images to SDR, and fixed some bugs.
There are two releases of Paint.NET:
Changes since 5.1.6:
Changes since 5.1.5:
Changes since 5.1.4:

This is a hotfix for 5.1.5 that fixes a memory leak, and also updates the bundled JPEG XL plugin to fix a crash on ARM64.
The 5.1.5 update added JPEG XL (*.jxl) support, improved quantization color quality, updatesdAVIF loading to better handle mapping HDR images to SDR, and fixed some bugs.
There are two releases of Paint.NET:
Changes since 5.1.5:
Changes since 5.1.4:

This update adds JPEG XL (*.jxl) support, improves quantization color quality, updates AVIF loading to better handle mapping HDR images to SDR, and fixes some bugs.
There are two releases of Paint.NET:
Changes since 5.1.4:

This update adds JPEG XL (*.jxl) support, improves quantization color quality, updates AVIF loading to better handle mapping HDR images to SDR, and fixes some bugs.
Change Log
Changes since 5.1.4:
Download and Install
This build is available via the built-in updater as long as you have opted-in to pre-release updates. From within Settings -> Updates, enable βAlso check for pre-release (beta) versions of paint.netβ and then click on the Check Now button. You can also use the links below to download an offline installer or portable ZIP.
![]()
You can also download the installer here (for any supported CPU and OS), which is also where you can find downloads for offline installers, portable ZIPs, and deployable MSIs.


This update is mostly a hotfix that fixes installation on Windows Server systems.
There are two releases of Paint.NET:
Changes since 5.1.3:

OBS-Studio-32.1.0-Sources.tar.gz: e03440278ef0e14232325e5a7068a18c03f358d949ab20e3d29308b7692ad7e2
OBS-Studio-32.1.0-Ubuntu-24.04-x86_64-dbsym.ddeb: d6479300c989e4a75b363081bcbbe84607ce20151654d6dc7e0d672c33fc6d96
OBS-Studio-32.1.0-Ubuntu-24.04-x86_64.deb: 89fa7657c56ffcc302ba75956eef1e7efaedd0e66ae2e2bd79170604d6c68800
OBS-Studio-32.1.0-Windows-arm64-PDBs.zip: c1e62dc4208343361fbdf6fbef2f557d51f83202cf39fb7b873663492b93d2f5
OBS-Studio-32.1.0-Windows-arm64.zip: af0ce32dc3c9beb443545fa5b356a4094b3bdbcb70936019c4c5198505dc19ee
OBS-Studio-32.1.0-Windows-x64-Installer.exe: 0e3d75eb83951d3fe100cdc7a97fd870f16781bbdcf544fbe101d9b89f9c6231
OBS-Studio-32.1.0-Windows-x64-PDBs.zip: 164a6476f46fa4ba274a47ec85b979a667b04d1130b19dccf7c3da9feddc87ce
OBS-Studio-32.1.0-Windows-x64.zip: 7c742f250dc1355ca4a7ccfbcd07a1b63f53ea46f4e052bce2426d8d324ee90d
OBS-Studio-32.1.0-macOS-Apple-dSYMs.tar.xz: a553dccbbd4b9d010ba612fa301ba78fd607118e48ea7a11e2a2e978fbf63042
OBS-Studio-32.1.0-macOS-Apple.dmg: a5dc3507be161becef5cad8112c4acd168cbc37c80fc186b66ed453b7e9f4fc5
OBS-Studio-32.1.0-macOS-Intel-dSYMs.tar.xz: 44eaa7aba6a691991ff62b244b5cccd29eff92f4138f3e191b65d0acde7b7f7c
OBS-Studio-32.1.0-macOS-Intel.dmg: a7dfd507bb04ace769e7a813a97d9f994fd79cdc5507b794b5bf1f32bdcd502e
OBS-Studio-32.1.0-rc4-Sources.tar.gz: d87e203586b63ec6a85f07a9b8712c4fe6c0be76cc70c0a23dcfcb5f1ca4106f
OBS-Studio-32.1.0-rc4-Ubuntu-24.04-x86_64-dbsym.ddeb: 7d01b6ac8e806db1580a2333e5e7c3b388a839b4bc40dd8cf0650f52ca39496c
OBS-Studio-32.1.0-rc4-Ubuntu-24.04-x86_64.deb: 0432d9d97ec1516c289173ae1a8787ae5325c9e822ce6e4390875020b6b46ee3
OBS-Studio-32.1.0-rc4-Windows-arm64-PDBs.zip: d2c1fedf8484dbb40932be97f39d15324cfe5c503661dae7ffd17e80782e4b14
OBS-Studio-32.1.0-rc4-Windows-arm64.zip: 43037e66dd8bb6b276fc6d720acabfe2b02d7721085b886e58fcd0b247fb89ba
OBS-Studio-32.1.0-rc4-Windows-x64-Installer.exe: daeb4136de7e5201e8d765c22c67c36a55205c59d8d6a96841a3ce894c042de8
OBS-Studio-32.1.0-rc4-Windows-x64-PDBs.zip: 09b22d2114c1dcf59fcaac9b85227b4c9b49ebf3d2c8fdd2a435b79bdc884e0a
OBS-Studio-32.1.0-rc4-Windows-x64.zip: f67d337d7609778c414eb92339b4dd310651ec3ddb724026b334540cb626ffa9
OBS-Studio-32.1.0-rc4-macOS-Apple-dSYMs.tar.xz: 55c6ccbf6642a52d17be676f20659f8ae9231ac4017c810770c65a5f2029be5e
OBS-Studio-32.1.0-rc4-macOS-Apple.dmg: 129597da2c4184ae26acf54ee5afc4fa80bce913c61135fab6e035d8e945bc3a
OBS-Studio-32.1.0-rc4-macOS-Intel-dSYMs.tar.xz: 1f46ee862ee3dd330f3c79e8046ade177aae351d9bd5959cb46c413f809e0de5
OBS-Studio-32.1.0-rc4-macOS-Intel.dmg: e2bce0c859694ac9968316d1844f1a0ce76fe5ac1197363496db2f3d52cf7260
The Stable channel has been updated to 146.0.7680.65/.66 for Windows and Mac as part of our early stable release to a small percentage of users. A full list of changes in this build is available in the log.
You can find more details about early Stable releases here.
Interested in switching release channels? Β Find out how here. If you find a new issue, please let us know by filing a bug. The community help forum is also a great place to reach out for help or learn about common issues.
Srinivas Sista
Google Chrome
Below are development builds for testing purposes.
Latest development build: 2.6.3.22 (March 16th 2026)
Latest stable release build: 2.6.3
https://github.com/clsid2/mpc-hc/releases/tag/2.6.3
OBS-Studio-32.1.0-rc3-Sources.tar.gz: 1163e665e7c0a359c5f0ec0379ebb63f985450021dfaa0993c95bd89e2ae21f1
OBS-Studio-32.1.0-rc3-Ubuntu-24.04-x86_64-dbsym.ddeb: c94ae2c4e62c18c9f7b10abcbe0e1b0061d60c5cacf1b3629ac28cdd43734283
OBS-Studio-32.1.0-rc3-Ubuntu-24.04-x86_64.deb: 24660b39b13e6010b92f8bf16c5b0e616d1156318dc345d874f73959176b326f
OBS-Studio-32.1.0-rc3-Windows-arm64-PDBs.zip: f5922f1fdfaed3cb19d14217748882f502f12d4ab28ddfb92df7be51ad9538a8
OBS-Studio-32.1.0-rc3-Windows-arm64.zip: 0186c383511164264ee62114dc37f0e82b72303922574883126c8d8bfddfdc28
OBS-Studio-32.1.0-rc3-Windows-x64-Installer.exe: f3ac27783ebfa8dc827add30af2857abd11fedce1c812f8bfaf6f1558735f01c
OBS-Studio-32.1.0-rc3-Windows-x64-PDBs.zip: be932b16d384840b79cc7be7ef244ccdfb100e1c17d6f6249d7ce19aa1d93bb6
OBS-Studio-32.1.0-rc3-Windows-x64.zip: 2762d28c326bbe5627293f802ca02872d267698f08f955b1700275eeb6daa76b
OBS-Studio-32.1.0-rc3-macOS-Apple-dSYMs.tar.xz: ba6f5ccd86c737ea656230dfa144e5262071e51d273d9a870921c05ec8855b77
OBS-Studio-32.1.0-rc3-macOS-Apple.dmg: 1ba12f51674955ce86830f44eff30b83ac6a94fc88c6b11b440e81addca2d8c0
OBS-Studio-32.1.0-rc3-macOS-Intel-dSYMs.tar.xz: 47a57bfe7b8399ded54ad4dfe02917ac54b39b32c19b205e7a5533acd0a873b3
OBS-Studio-32.1.0-rc3-macOS-Intel.dmg: 2052d5db8decdf58e4e460266779e64053c04eabdd2de96875a2fd4b6a422bb3
The Extended Stable channel has been updated to 144.0.7559.236Β for Windows and Mac which will roll out over the coming days/weeks.
Β The Stable channel has been updated to 145.0.7632.159/160 for Windows/MacΒ andΒ 145.0.7632.159 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in theΒ Log
Security Fixes and Rewards
Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but havenβt yet fixed.
This update includes 10 security fixes. Please see the Chrome Security Page for more information.
[$33,000][485622239] Critical CVE-2026-3536: Integer overflow in ANGLE. Reported by cinzinga on 2026-02-18
[$32,000][474266014] Critical CVE-2026-3537: Object lifecycle issue in PowerVR. Reported by Zhihua Yao of KunLun Lab on 2026-01-08
[TBD][484983991] Critical CVE-2026-3538: Integer overflow in Skia. Reported by Symeon Paraschoudis on 2026-02-17
[TBD][483853098] High CVE-2026-3539: Object lifecycle issue in DevTools. Reported by Zhenpeng (Leo) Lin at depthfirst on 2026-02-12
[TBD][484088917] High CVE-2026-3540: Inappropriate implementation in WebAudio. Reported by Davi AntΓ΄nio Cruz on 2026-02-14
[TBD][484811719] High CVE-2026-3541: Inappropriate implementation in CSS. Reported by Syn4pse on 2026-02-16
[TBD][485152421] High CVE-2026-3542: Inappropriate implementation in WebAssembly. Reported by qymag1c on 2026-02-17
[TBD][485267831] High CVE-2026-3543: Inappropriate implementation in V8. Reported by qymag1c on 2026-02-18
[TBD][485683110] High CVE-2026-3544: Heap buffer overflow in WebCodecs. Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-02-19
[TBD][487383169] High CVE-2026-3545: Insufficient data validation in Navigation. Reported by Google on 2026-02-24
We would also like to thank all security researchers that worked with us during the development cycle to prevent security bugs from ever reaching the stable channel.
Many of our security bugs are detected using AddressSanitizer, MemorySanitizer, UndefinedBehaviorSanitizer, Control Flow Integrity, libFuzzer, or AFL.
Interested in switching release channels? Find out howΒ here. If you find a new issue, please let us know byΒ filing a bug. TheΒ community help forumΒ is also a great place to reach out for help or learn about common issues.
Srinivas Sista