Extended Stable Updates for Desktop
The Extended Stable channel has been updated to 146.0.7680.216Β for Windows and Mac which will roll out over the coming days/weeks.
The Extended Stable channel has been updated to 146.0.7680.216Β for Windows and Mac which will roll out over the coming days/weeks.
The Stable channel has been updated to 147.0.7727.137/138 for Windows/MacΒ andΒ 147.0.7727.137 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in theΒ Log
Security Fixes and Rewards
Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but havenβt yet fixed.
This update includes 30 security fixes. Below, we highlight fixes that were contributed by external researchers. Please see the Chrome Security Page for more information.
[$7000][494352590] Critical CVE-2026-7363: Use after free in Canvas. Reported by heapracer on 2026-03-19
[N/A][493221953] Critical CVE-2026-7361: Use after free in iOS. Reported by Google on 2026-03-16
[N/A][503419515] Critical CVE-2026-7344: Use after free in Accessibility. Reported by Google on 2026-04-16
[N/A][503645680] Critical CVE-2026-7343: Use after free in Views. Reported by Google on 2026-04-17
[$16000][493955227] High CVE-2026-7333: Use after free in GPU. Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-03-19
[N/A][495852034] High CVE-2026-7360: Insufficient validation of untrusted input in Compositing. Reported by Google on 2026-03-24
[N/A][496284494] High CVE-2026-7359: Use after free in ANGLE. Reported by Google on 2026-03-25
[N/A][496285281] High CVE-2026-7358: Use after free in Animation. Reported by Google on 2026-03-25
[TBD][496456528] High CVE-2026-7334: Use after free in Views. Reported by Batuhan EΕref KOΓ on 2026-03-26
[N/A][497047552] High CVE-2026-7357: Use after free in GPU. Reported by Google on 2026-03-27
[N/A][497769116] High CVE-2026-7356: Use after free in Navigation. Reported by Google on 2026-03-30
[N/A][498746519] High CVE-2026-7354: Out of bounds read and write in Angle. Reported by Google on 2026-04-01
[N/A][498809718] High CVE-2026-7353: Heap buffer overflow in Skia. Reported by Google on 2026-04-01
[N/A][499023054] High CVE-2026-7352: Use after free in Media. Reported by Google on 2026-04-02
[N/A][499119490] High CVE-2026-7351: Race in MHTML. Reported by Google on 2026-04-02
[N/A][500018484] High CVE-2026-7350: Use after free in WebMIDI. Reported by Google on 2026-04-06
[N/A][500034684] High CVE-2026-7349: Use after free in Cast. Reported by Google on 2026-04-06
[N/A][500104917] High CVE-2026-7348: Use after free in Codecs. Reported by Google on 2026-04-06
[TBD][500387779] High CVE-2026-7335: Use after free in media. Reported by Jungwoo Lee (@physicube) and Wongi Lee (@_qwerty_po) on 2026-04-07
[TBD][500767595] High CVE-2026-7336: Use after free in WebRTC. Reported by Mozilla on 2026-04-09
[TBD][500880819] High CVE-2026-7337: Type Confusion in V8. Reported by q@calif.io on 2026-04-09
[N/A][501722605] High CVE-2026-7347: Use after free in Chromoting. Reported by Google on 2026-04-11
[N/A][502206907] High CVE-2026-7346: Inappropriate implementation in Tint. Reported by Google on 2026-04-13
[N/A][502248774] High CVE-2026-7345: Insufficient validation of untrusted input in Feedback. Reported by Google on 2026-04-13
[TBD][502449857] High CVE-2026-7338: Use after free in Cast. Reported by Krace on 2026-04-14
[N/A][503889643] High CVE-2026-7342: Use after free in WebView. Reported by Google on 2026-04-17
[N/A][504586599] High CVE-2026-7341: Use after free in WebRTC. Reported by Google on 2026-04-20
[$4000][493957495] Medium CVE-2026-7339: Heap buffer overflow in WebRTC. Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-03-19
[$3000][497896137] Medium CVE-2026-7340: Integer overflow in ANGLE. Reported by 86ac1f1587b71893ed2ad792cd7dde32 on 2026-03-30
[N/A][498285711] Medium CVE-2026-7355: Use after free in Media. Reported by Google on 2026-03-31
We would also like to thank all security researchers that worked with us during the development cycle to prevent security bugs from ever reaching the stable channel.
Many of our security bugs are detected using AddressSanitizer, MemorySanitizer, UndefinedBehaviorSanitizer, Control Flow Integrity, libFuzzer, or AFL.
Interested in switching release channels? Find out howΒ here. If you find a new issue, please let us know byΒ filing a bug. TheΒ community help forumΒ is also a great place to reach out for help or learn about common issues.
Srinivas Sista
Fixed an issue where Facebook and other websites might not load properly for users with Bitdefender security software installed. (Bug 2034178)
Fixed an issue where denying a geolocation permission prompt could cause Firefox to show the system permission dialog again on a second attempt. (Bug 2034120)
Fixed an issue that prevented tabs from being added to some older saved tab groups. (Bug 2031961)
Fixed a layout issue where some drop-down menus expanded to display all list items at once. (Bug 2033117)
Fixed an issue where borders and outlines on some page elements disappeared when pinch zooming or smart zooming on macOS and Windows. (Bug 2030043)
Various security fixes.
All Relay users can now create up to 50 email masksβan increase from the previous limit of 5.
Reference link to 150.0 release notes.

Windows Installer
Windows No Installer (zip)
macOS - Universal
Linux - deb, AppImage or rpm
Windows intel x32 releases are marked -ia32-
ChangeLog:
The Stable channel has been updated to 148.0.7778.56/.57 for Windows and Mac as part of our early stable release to a small percentage of users. A full list of changes in this build is available in the log.
You can find more details about early Stable releases here.
Interested in switching release channels? Β Find out how here. If you find a new issue, please let us know by filing a bug. The community help forum is also a great place to reach out for help or learn about common issues.
Srinivas Sista
Google Chrome
Changelog
Wana boot and install OS through network (PXE)? Welcome to my new project iVentoy.
About iVentoy https://www.iventoy.com/
iVentoy is an enhanced version of the PXE server.
Extremely easy to use
Many advanced features
x86 Legacy BIOS, IA32 UEFI, x86_64 UEFI and ARM64 UEFI mode supported
110+ common types of OS supported (Windows/WinPE/Linux/VMware)
Turn any PC, laptop, server, NAS, or Raspberry Pi into a PXE server instantly!
......
SHA-256
04620b546bcc5eeeb5971767595b3713ee3de71580a82449053c53a7cb32fcd9 ventoy-1.1.12-linux.tar.gz
c1345277c8f3a8fcc213945687bcad5ff1d680b1d6b7b7a1cdf85f7d4a368406 ventoy-1.1.12-livecd.iso
e70c505be08d99c55e506832f596c430a9c36f8d087f25542d3f6d332d9b6473 ventoy-1.1.12-windows.zip
The Stable channel has been updated to 147.0.7727.116/117 for Windows/MacΒ andΒ 147.0.7727.116 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in theΒ Log
Security Fixes and Rewards
Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but havenβt yet fixed.
This update includes 19 security fixes. Below, we highlight fixes that were contributed by external researchers. Please see the Chrome Security Page for more information.
[TBD][493652473] High CVE-2026-6919: Use after free in DevTools. Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-03-18
[TBD][499891888] High CVE-2026-6920: Out of bounds read in GPU. Reported by tatiwari of Microsoft on 2026-04-06
[TBD][493315759] Medium CVE-2026-6921: Race in GPU. Reported by soiax on 2026-03-17
We would also like to thank all security researchers that worked with us during the development cycle to prevent security bugs from ever reaching the stable channel.
As usual, our ongoing internal security work was responsible for a wide range of fixes:
[505764421]Various fixes from internal audits, fuzzing and other initiatives
Many of our security bugs are detected using AddressSanitizer, MemorySanitizer, UndefinedBehaviorSanitizer, Control Flow Integrity, libFuzzer, or AFL.
Interested in switching release channels? Find out howΒ here. If you find a new issue, please let us know byΒ filing a bug. TheΒ community help forumΒ is also a great place to reach out for help or learn about common issues.
Srinivas Sista
Β The Extended Stable channel has been updated to 146.0.7680.208Β for Windows and Mac which will roll out over the coming days/weeks.
OBS-Studio-32.1.2-Sources.tar.gz: c6532380c68a75327fe8b551461adeca8f184dcbe4015096251a6de76362a554
OBS-Studio-32.1.2-Ubuntu-24.04-x86_64-dbsym.ddeb: 3cf56a96de5d0b45f641e8415d3dacc1e47dfc897ba5bcd118b3af05a9ea76da
OBS-Studio-32.1.2-Ubuntu-24.04-x86_64.deb: a3bb1b0176604dad9e22710e057f0fdd76e8afb600e0e1914c30464ae49908e8
OBS-Studio-32.1.2-Windows-arm64-PDBs.zip: 609c4cd849f8d225b021a5f50a080c31af8beb1b5275f2b0088318ab80b0ed78
OBS-Studio-32.1.2-Windows-arm64.zip: 5e1e400e1b49d2019c97c928873229336c8e0b56df488663532376485746328e
OBS-Studio-32.1.2-Windows-x64-Installer.exe: 94d180c1fc481ccc307b95513f795d088d63ac4f61ad3253c2ac0d94d0844110
OBS-Studio-32.1.2-Windows-x64-PDBs.zip: 8105fed359f3437819264b0ebb1c50db6d3bb30de1a65d4a3049e3c14f88deb8
OBS-Studio-32.1.2-Windows-x64.zip: 8d97e4563bd8d22d03e63042aa7dccede1d555c9bd35ce8a9e5019b0d0201bf6
OBS-Studio-32.1.2-macOS-Apple-dSYMs.tar.xz: eea32d7c022237e163a02f8f2fdc26c8b1a0d4a4fc3fb49aaf14df7b59b3d668
OBS-Studio-32.1.2-macOS-Apple.dmg: 2aeb3aaa99544fefd557f10ac6550e73df71540dd57528b2a1e6f39a55ebacfb
OBS-Studio-32.1.2-macOS-Intel-dSYMs.tar.xz: 6a06ed32e0626cafcb7d4f53074b80e63329c1c99309c7f5898d469ed0ef307c
OBS-Studio-32.1.2-macOS-Intel.dmg: f7febee4c52e97930ffa9d8bcae79ee4c60c411827688cfbe36bc53edc51616e
Split View just got better: You can now right-click any link and choose Open Link in Split View to open it alongside your current tab. You can also search open tabs when creating a split view and quickly reverse tab positions using the new Reverse Tabs option in the tab context menu.
Share multiple tabs in a single step. Select several tabs, right-click, and choose Copy X Links (for Windows and Linux) or choose Share β Copy X Links (for MacOS). When pasted into other apps that support rich text, links include both the page title and the URL for easy reading.
You can now use Firefoxβs built-in PDF editor to reorder, copy, paste, delete, and export pages in a PDF.
Try out real-time, private translations in Firefox Desktop with the about:translations page. Start typing the word "translate" into the URL bar for a quick-action shortcut to the page.
![]()
Added support for the GTK emoji picker on Linux, allowing users to insert emoji using the system shortcut (typically Ctrl+.).
Firefox web apps are now available to Windows users who installed Firefox through the Microsoft Store.
The new Firefox Profile management system is now available to all users, including users on Windows 10.
Backing up a profile to a file is now available to all Windows 10 and 11 users, including those who use the new profile management system.
Firefox now ships with a new .rpm package for Linux users on Red Hat, Fedora, openSUSE, and other RPM-based distributions.
Firefox now prompts you to enable location access in Windows settings when granting a website permission to use your location, if geolocation hasn't already been allowed. This behavior, previously limited to some Windows 11 versions, now applies to all supported Windows versions.
The built-in VPN is now available for users in Canada. Note: This feature is not available in enterprise environments.
This feature is part of a progressive roll out.
Certain new Firefox features are released gradually. This means some users will see the feature before everyone does. This approach helps to get early feedback to catch bugs and improve behavior quickly, meaning more Firefox users overall have a better experience.
Fixed an issue on macOS where, when macOS Lockdown mode is enabled, emoji characters are not displayed in web content.
Various security fixes.
If you prefer creating tab groups from the context menu, you can now turn off drag-and-drop group creation in Settings > Tabs > Drag tabs to create tab groups.
You can find information about policy updates and enterprise-specific bug fixes in the Firefox for Enterprise 150 Release Notes.
A new element-specific section has been added to the pseudo-class toggle panel including a toggle for the :open pseudo-class, which is only available for elements that have an open state like <dialog> elements. The existing toggle for the :visited pseudo-class was also moved there, as it only applies to <a> and <area> elements. (Learn More)
The Document.caretPositionFromPoint() method now only returns a position in a shadow DOM if its ShadowRoot is passed in the newly-added shadowRoots option.
The devtools network monitor now indicates when a connection used a certificate issued by a certificate authority not in Mozilla's Root CA Program.
Firefox now supports the ariaNotify API for accessibility notifications (e.g. for screen readers) as a more ergonomic and reliable alternative to ARIA live regions.
Firefox now supports media element pseudo-classes (e.g., :playing, :paused) to allow more precise styling based on media playback state.
Added support for the highlightsFromPoint() API, which allows web pages to interact with CSS Highlights by returning all Highlights at a given point.
Firefox now supports light-dark() on images, just like on colors, which is very useful for supporting dark mode on websites.
The color-mix() function previously accepted only two color values. This limitation has now been removed, allowing the function to accept an arbitrary number of colors.
Added support for a new auto value on the sizes attribute for lazy-loaded image elements with multiple images defined via srcset. This allows the browser to automatically select the right image based on the layout width of the image element. (Learn More)
Users with Bitdefender security software installed may experience problems loading websites, particularly Facebook.com. We are working on a workaround, but as a temporary mitigation, disabling Bitdefender or turning off its traffic filtering features may resolve the issue. (Fixed in 150.0.1)
Some websites on internal or corporate networks that require a login prompt may fail to display the sign-in dialog in Firefox 150, showing a blank page instead. (Fixed in 150.0.2 in Bug 2034752)
With the release of Firefox 150, we are pleased to welcome the developers who contributed their first code change to Firefox in this release, 22 of whom were brand new volunteers! Please join us in thanking each of these diligent and enthusiastic individuals, and take a look at their contributions:

Donations are appreciated. There is now a PayPal option.
Updates:
Fixes:
Subtitle downloads from OpenSubtitles may fail depending on time of day. This is due to our daily download quota being exceeded. Current amount of donations is barely enough to pay for the existing quota. So it is unlikely that quota can be increased and situation will get worse over time.
If you create an OpenSubtitles account and configure it in MPC-HC settings then you may be able to bypass the quota.
Options > Subtitles > Misc > Right-click on OpenSubtitles.com > Setup > Fill in username/password
A lot of people seem to be unaware of some of the awesome features that have been added to MPC-HC in the past years. Here is a list of useful options and features that everyone should know about:
1 (restore normal view with 3).
Windows Installer
Windows No Installer (zip)
macOS - Universal
Linux - deb, AppImage or rpm
Windows intel x32 releases are marked -ia32-
ChangeLog:
The Extended Stable channel has been updated to 146.0.7680.201Β for Windows and Mac which will roll out over the coming days/weeks.
The Stable channel has been updated to 147.0.7727.101/102 for Windows/MacΒ andΒ 147.0.7727.101Β for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in theΒ Log
Security Fixes and Rewards
Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but havenβt yet fixed.
This update includes 31 security fixes. Please see the Chrome Security Page for more information.
[$90000][490170083] Critical CVE-2026-6296: Heap buffer overflow in ANGLE. Reported by cinzinga on 2026-03-05
We would also like to thank all security researchers that worked with us during the development cycle to prevent security bugs from ever reaching the stable channel.
Interested in switching release channels? Find out howΒ here. If you find a new issue, please let us know byΒ filing a bug. TheΒ community help forumΒ is also a great place to reach out for help or learn about common issues.
Srinivas Sista
Below are development builds for testing purposes.
Latest development build: 2.7.0.10 (April 14th 2026)
Latest stable release build: 2.7.0
https://github.com/clsid2/mpc-hc/releases/tag/2.7.0
Bugfix release.
lazbuild - (c9c6be0).exe extension!!! - (35d2ebd).deb - (e95aca8)Package variable - (13c55ce)v4 of git-cliff-action - (81d613b)build-* - (16a54a5)tx-push recipe - (d293d64).ini files on run-* - (c513e53)run-gtk2, run-qt5 - (04650d9)tx-push to Makefile - (3ceed39)secrets.mk - (123a2e7)Note
For a list of all the changes up to date, please read CHANGELOG.md.
Bump version for v12.17 release
Β The Extended Stable channel has been updated to 146.0.7680.188Β for Windows and Mac which will roll out over the coming days/weeks.
Β The Chrome team is delighted to announce the promotion of Chrome 147 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks.
Security Fixes and Rewards
Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but havenβt yet fixed.
This update includes multiple security fixes. Please see the Chrome Security Page for more information.
[$43000][493319454] Critical CVE-2026-5858: Heap buffer overflow in WebML. Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-03-17
[$43000][494158331] Critical CVE-2026-5859: Integer overflow in WebML. Reported by Anonymous on 2026-03-19
[$11000][486495143] High CVE-2026-5860: Use after free in WebRTC. Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-02-22
[$3000][486927780] High CVE-2026-5861: Use after free in V8. Reported by 5shain on 2026-02-23
[TBD][470566252] High CVE-2026-5862: Inappropriate implementation in V8. Reported by Google on 2025-12-21
[TBD][484527367] High CVE-2026-5863: Inappropriate implementation in V8. Reported by Google on 2026-02-14
[TBD][490642831] High CVE-2026-5864: Heap buffer overflow in WebAudio. Reported by Syn4pse on 2026-03-08
[TBD][491884710] High CVE-2026-5865: Type Confusion in V8. Reported by Project WhatForLunch (@pjwhatforlunch) on 2026-03-12
[TBD][492218537] High CVE-2026-5866: Use after free in Media. Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-03-13
[TBD][492668885] High CVE-2026-5867: Heap buffer overflow in WebML. Reported by Syn4pse on 2026-03-14
[TBD][493256564] High CVE-2026-5868: Heap buffer overflow in ANGLE. Reported by cinzinga on 2026-03-16
[TBD][493708165] High CVE-2026-5869: Heap buffer overflow in WebML. Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-03-18
[TBD][495534710] High CVE-2026-5870: Integer overflow in Skia. Reported by Google on 2026-03-23
[TBD][495679730] High CVE-2026-5871: Type Confusion in V8. Reported by Google on 2026-03-24
[TBD][496281816] High CVE-2026-5872: Use after free in Blink. Reported by Google on 2026-03-25
[TBD][496301615] High CVE-2026-5873: Out of bounds read and write in V8. Reported by Google on 2026-03-25
[$11000][485397279] Medium CVE-2026-5874: Use after free in PrivateAI. Reported by Krace on 2026-02-18
[$4000][430198264] Medium CVE-2026-5875: Policy bypass in Blink. Reported by Lyra Rebane (rebane2001) on 2025-07-08
[$2000][41485206] Medium CVE-2026-5876: Side-channel information leakage in Navigation. Reported by Lyra Rebane (rebane2001) on 2023-12-18
[TBD][333024273] Medium CVE-2026-5877: Use after free in Navigation. Reported by Cassidy Kim(@cassidy6564) on 2024-04-05
[TBD][365089001] Medium CVE-2026-5878: Incorrect security UI in Blink. Reported by Shaheen Fazim on 2024-09-06
[TBD][40073848] Medium CVE-2026-5879: Insufficient validation of untrusted input in ANGLE. Reported by parkminchan, working for SSD Labs Korea on 2023-10-01
[TBD][424995036] Medium CVE-2026-5880: Incorrect security UI in browser UI. Reported by Anonymous on 2025-06-14
[TBD][454162508] Medium CVE-2026-5881: Policy bypass in LocalNetworkAccess. Reported by asnine on 2025-10-22
[TBD][480993682] Medium CVE-2026-5882: Incorrect security UI in Fullscreen. Reported by Anonymous on 2026-02-02
[TBD][482958590] Medium CVE-2026-5883: Use after free in Media. Reported by sherkito on 2026-02-09
[TBD][484547633] Medium CVE-2026-5884: Insufficient validation of untrusted input in Media. Reported by xmzyshypnc on 2026-02-15
[TBD][485203823] Medium CVE-2026-5885: Insufficient validation of untrusted input in WebML. Reported by Bryan Bernhart on 2026-02-17
[TBD][485397283] Medium CVE-2026-5886: Out of bounds read in WebAudio. Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-02-18
[TBD][486079015] Medium CVE-2026-5887: Insufficient validation of untrusted input in Downloads. Reported by daffainfo on 2026-02-20
[TBD][486506202] Medium CVE-2026-5888: Uninitialized Use in WebCodecs. Reported by Identified by the Octane Security Team: Giovanni Vignone, Paolo Gentry, Robert van Eijk on 2026-02-22
[TBD][486906037] Medium CVE-2026-5889: Cryptographic Flaw in PDFium. Reported by mlafon on 2026-02-23
[TBD][487259772] Medium CVE-2026-5890: Race in WebCodecs. Reported by Casper Woudenberg on 2026-02-24
[TBD][487471101] Medium CVE-2026-5891: Insufficient policy enforcement in browser UI. Reported by Tianyi Hu on 2026-02-25
[TBD][487568011] Medium CVE-2026-5892: Insufficient policy enforcement in PWAs. Reported by Tianyi Hu on 2026-02-25
[TBD][487768771] Medium CVE-2026-5893: Race in V8. Reported by QYmag1c on 2026-02-26
[$1000][481882038] Low CVE-2026-5894: Inappropriate implementation in PDF. Reported by Povcfe of Tencent Security Xuanwu Lab on 2026-02-05
[TBD][374285495] Low CVE-2026-5895: Incorrect security UI in Omnibox. Reported by Renwa Hiwa @RenwaX23 on 2024-10-18
[TBD][40064543] Low CVE-2026-5896: Policy bypass in Audio. Reported by Luan Herrera (@lbherrera_) on 2023-05-13
[TBD][419921726] Low CVE-2026-5897: Incorrect security UI in Downloads. Reported by Farras Givari on 2025-05-24
[TBD][470295118] Low CVE-2026-5898: Incorrect security UI in Omnibox. Reported by saidinahikam032 on 2025-12-19
[TBD][474817168] Low CVE-2026-5899: Incorrect security UI in History Navigation. Reported by Islam Rzayev on 2026-01-11
[TBD][475265304] Low CVE-2026-5900: Policy bypass in Downloads. Reported by Luan Herrera (@lbherrera_) on 2026-01-13
[TBD][479673903] Low CVE-2026-5901: Policy bypass in DevTools. Reported by Povcfe of Tencent Security Xuanwu Lab on 2026-01-29
[TBD][483109205] Low CVE-2026-5902: Race in Media. Reported by Luke Francis on 2026-02-10
[TBD][483771899] Low CVE-2026-5903: Policy bypass in IFrameSandbox. Reported by @Ciarands on 2026-02-11
[TBD][483851888] Low CVE-2026-5904: Use after free in V8. Reported by Zhenpeng (Leo) Lin at depthfirst on 2026-02-12
[TBD][483899628] Low CVE-2026-5905: Incorrect security UI in Permissions. Reported by daffainfo on 2026-02-12
[TBD][484082189] Low CVE-2026-5906: Incorrect security UI in Omnibox. Reported by mohamedhesham9173 on 2026-02-13
[TBD][484665123] Low CVE-2026-5907: Insufficient data validation in Media. Reported by Luke Francis on 2026-02-15
[TBD][485115554] Low CVE-2026-5908: Integer overflow in Media. Reported by Ameen Basha M K & Mohammed Yasar B on 2026-02-17
[TBD][485203821] Low CVE-2026-5909: Integer overflow in Media. Reported by Mohammed Yasar B & Ameen Basha M K on 2026-02-17
[TBD][485212874] Low CVE-2026-5910: Integer overflow in Media. Reported by Ameen Basha M K & Mohammed Yasar B on 2026-02-17
[TBD][485785246] Low CVE-2026-5911: Policy bypass in ServiceWorkers. Reported by lebr0nli of National Yang Ming Chiao Tung University, Dept. of CS, Security and Systems Lab on 2026-02-19
[TBD][486498791] Low CVE-2026-5912: Integer overflow in WebRTC. Reported by c6eed09fc8b174b0f3eebedcceb1e792 on 2026-02-22
[TBD][487195286] Low CVE-2026-5913: Out of bounds read in Blink. Reported by Vitaly Simonovich on 2026-02-24
[TBD][490023239] Low CVE-2026-5914: Type Confusion in CSS. Reported by Syn4pse on 2026-03-05
[TBD][494341335] Low CVE-2026-5915: Insufficient validation of untrusted input in WebML. Reported by ningxin.hu@intel.com on 2026-03-20
[TBD][490139441] Low CVE-2026-5918: Inappropriate implementation in Navigation. Reported by Google on 2026-03-05
[TBD][483423893] Low CVE-2026-5919: Insufficient validation of untrusted input in WebSockets. Reported by Richard Belisle on 2026-02-10
We would also like to thank all security researchers that worked with us during the development cycle to prevent security bugs from ever reaching the stable channel.
Many of our security bugs are detected using AddressSanitizer, MemorySanitizer, UndefinedBehaviorSanitizer, Control Flow Integrity, libFuzzer, or AFL.
Interested in switching release channels? Find out howΒ here. If you find a new issue, please let us know byΒ filing a bug. TheΒ community help forumΒ is also a great place to reach out for help or learn about common issues.
Srinivas Sista
Google Chrome
Various security fixes.
Fixed an issue where certain parts of web pages, such as drop-down menus and specific styles, did not appear correctly when printing. (Bug 2026109)
Fixed an issue where some website error pages displayed generic connection messages instead of the specific error code and description provided by the server. (Bug 2023800)
Fixed a crash that occurred when using certain security keys or WebAuthn features for two-factor authentication. (Bug 2026688)
Fixed an issue on Linux where the browser toolbar could become unresponsive to mouse clicks after dragging a tab when using Wayland. (Bug 2022238)
Fixed a layout issue where text inside certain graphics (SVG) appeared shifted or misaligned from its intended position. (Bug 2024647)
Fixed an issue where the "Send to device" option failed to work when used from the Open Tabs section in Firefox View. (Bug 2023201)
Introduced a new enterprise policy that allows administrators to directly manage and control AI-related features within Firefox. (Bug 2019983)
Fixed an issue where enterprise policies for the browser homepage and start page were not being applied correctly. (Bug 2027888)
Introduced a new enterprise policy that allows administrators to prevent the built-in VPN and IP protection features from being available to users. (Bug 2022365)
Reference link to 149.0 release notes.

P.S.: If you enjoy Dopamine, please consider donating via PayPal or buying me a coffee. Your support keeps the music going!
6th Anniversary Ver.
SHA-256
ddcbcbf3341225d0c5df43f1d7cc65de0b8b2131643184c1a3ea359107789faa ventoy-1.1.11-linux.tar.gz
7509a24851f4b198268d868e085c2a016891adc758d2e0d2a554df35d5a23f32 ventoy-1.1.11-livecd.iso
1e56e02fc424c194fc4f33357cb949867854f386d67eaf9764f1c96264561493 ventoy-1.1.11-windows.zip
===============================================================================
Wana boot and install OS through network (PXE)? Welcome to my new project iVentoy.
About iVentoy https://www.iventoy.com/
iVentoy is an enhanced version of the PXE server.
Extremely easy to use
Many advanced features
x86 Legacy BIOS, IA32 UEFI, x86_64 UEFI and ARM64 UEFI mode supported
110+ common types of OS supported (Windows/WinPE/Linux/VMware)
......
Updates:
Changes:
Fixes: