A severe security vulnerability in Chromium’s Blink rendering engine, discovered by researcher Jose Pino, can crash billions of browsers almost instantly. The flaw, affecting multiple browsers including Chrome and Edge, exploits a lack of rate limiting on document.title API updates, leading to excessive DOM mutations that overwhelm the main thread. In tests, Edge crashed within 30 seconds while consuming 18GB of RAM. Pino reported the issue to the Chromium security team but received no response; Google is currently investigating.
Want More Context? 🔎






