they hacked CSS
This title could be clearer and more informative.Try out Clickbait Shieldfor free (5 uses left this month).
Chrome's first zero-day of the year (CVE-2026-2441, CVSS 8.8) is under active exploitation. The vulnerability is a use-after-free bug in Chrome's CSS font feature value map parsing, written in C++. When JavaScript iterates over CSS font feature rules and deletes entries simultaneously, a dangling pointer can be exploited to
•9m watch time
Sort: