Vulnerabilities and exploitation across Chrome, Firefox, Safari, Edge, and their smaller relatives — plus the browser-extension ecosystem, where a signed add-on can silently exfiltrate anything the browser can see. Combined article + CVE feed for the Browser beat.https://0daynews.com/en-ushttps://0daynews.com/articles/2026-08-14-belgium-eid-browser-extension-rce/https://0daynews.com/articles/2026-08-14-belgium-eid-browser-extension-rce/Severe vulnerabilities in Belgium's eID browser extension fully compromised the country's national identity trust framework, researchers confirmed, opening citizen accounts to remote code execution.Fri, 14 Aug 2026 02:00:00 GMTBrowserarticlehttps://0daynews.com/articles/2026-08-12-chrome-vpn-extensions-proxy-hijack/https://0daynews.com/articles/2026-08-12-chrome-vpn-extensions-proxy-hijack/737 Chrome extensions impersonated VPN services while routing users' traffic through a single SOCKS5 proxy. Over 75,000 installs affected across the Store.Wed, 12 Aug 2026 20:00:00 GMTBrowserarticlehttps://0daynews.com/articles/2026-07-31-google-chrome-ai-1442-security-bugs/https://0daynews.com/articles/2026-07-31-google-chrome-ai-1442-security-bugs/Google patched 1,442 security flaws across Chrome 149, 150, and 151 — more than the prior 23 releases combined. AI-assisted testing drove the surge.Fri, 31 Jul 2026 16:00:00 GMTBrowserarticlehttps://0daynews.com/articles/2026-07-25-malvertising-javascript-in-memory-malware/https://0daynews.com/articles/2026-07-25-malvertising-javascript-in-memory-malware/Fake Solana, Luno, and TradingView sites run malicious JavaScript that builds malware in browser memory — no file written, standard AV misses it.Sat, 25 Jul 2026 15:21:09 GMTBrowserarticlehttps://0daynews.com/articles/2026-07-14-manifold-claude-for-chrome-trust-boundary-still-open/https://0daynews.com/articles/2026-07-14-manifold-claude-for-chrome-trust-boundary-still-open/Manifold says the trust-boundary flaw behind ClaudeBleed is still open in Claude for Chrome v1.0.80 — eight releases after Anthropic's May fix.Tue, 14 Jul 2026 21:30:00 GMTBrowserarticlehttps://0daynews.com/articles/2026-07-14-ku-leuven-distrinet-85-crypto-wallet-extensions-address-linking/https://0daynews.com/articles/2026-07-14-ku-leuven-distrinet-85-crypto-wallet-extensions-address-linking/KU Leuven's DistriNet tested 85 Chrome crypto wallet extensions with ~35M installs. 17 link separate addresses in a single request. 22 of 36 ignore site disconnects.Tue, 14 Jul 2026 18:20:00 GMTBrowserarticlehttps://0daynews.com/articles/2026-07-13-modheader-stripe-olt-stanfordstudies-dormant-collector/https://0daynews.com/articles/2026-07-13-modheader-stripe-olt-stanfordstudies-dormant-collector/Stripe OLT found a browsing-history collector inside the store-signed ModHeader extension. Edge pulled it July 3; Chrome pulled it July 10. The allow-list shipped empty.Mon, 13 Jul 2026 19:20:00 GMTBrowserarticlehttps://0daynews.com/articles/2026-07-06-opera-gx-mods-auto-install-flaw-patched/https://0daynews.com/articles/2026-07-06-opera-gx-mods-auto-install-flaw-patched/Opera fixed a flaw that let a malicious website force-install a GX Mod and use CSS injection to lift data from pages you visited. Patched; no CVE; no in-wild exploitation reported.Mon, 06 Jul 2026 09:20:00 GMTBrowserarticle