Chrome (Organization): news timeline & CVEs

Interview: Firefox's chief on why he hopes a redesign will help win users from Chrome

Mozilla's Ajit Varma discusses Firefox 157's redesign, aiming to grow market share beyond privacy-focused users in a Chromium-dominated browser market.

Mozilla is rolling out the Firefox 157 redesign across desktop and mobile, hoping to attract mainstream users who currently default to Chrome, Edge, or Safari. Head of Firefox Ajit Varma says faster release velocity is partly enabled by AI development tools. Firefox remains financially dependent on the Google search default deal, which provides the majority of Mozilla's revenue. The browser is positioned as the main Gecko-based alternative to Chromium dominance.

Ars Technica · AISep 29, 13:00 UTC · 18h agoOther

Building a post-quantum certificate authority with Merkle Tree Certificates

Cloudflare becomes a certificate authority offering free Merkle Tree Certificate issuance, targeting Chrome's quantum-resistant root store inclusion in early 2027.

Cloudflare announced it is becoming a certificate authority that will support Merkle Tree Certificates (MTCs), an IETF PLANTS draft specification that batches certificates into an append-only Merkle tree signed at the root for compact post-quantum verification. The company targets early 2027 for inclusion in Chrome's newly launched Quantum-resistant Root Store, following a successful experimental deployment with Chrome, and will provide standard MTC issuance at no cost. Cloudflare notes post-quantum signatures are roughly 40 times larger than classical ones and would balloon certificate transparency log storage by 40x, motivating the MTC approach for authenticating roughly a billion TLS servers. Cloudflare also operates the Nimbus CT log family and is launching Raio, a new family of static CT logs.

Cloudflare Blogupdated 03:09 UTC · 4h agofirst Sep 29, 13:00 UTC · 18h agoTools 3 sources

Chrome 154 Patches 108 Vulnerabilities

Google patched 108 vulnerabilities in Chrome 154, including 11 critical buffer overflow and use-after-free flaws, with no active exploitation reported.

Google released Chrome 154 to the stable channel with fixes for 108 vulnerabilities, 11 of them critical. Critical bugs include buffer overflows in ANGLE (3) and WebGL, out-of-bounds writes in GPU and WebGL, and use-after-frees in ServiceWorker, Fullscreen, WindowDialog, and AdFilter. External researchers reported 32 of the flaws and have received at least $18,000 in bug bounties so far. Google makes no mention of in-the-wild exploitation; rollout versions are 154.0.8037.57/.58 for Windows/macOS.

SecurityWeekupdated Sep 24, 11:06 UTC · 5d agofirst Sep 23, 10:36 UTC · 6d agoVulnerability 2 sources

Chrome

Timeline3 articles

Appears with

Interview: Firefox's chief on why he hopes a redesign will help win users from Chrome

Building a post-quantum certificate authority with Merkle Tree Certificates

Chrome 154 Patches 108 Vulnerabilities