Zero-day CSS: CVE-2026-2441 exists in the wild

kept by eddie feb 20

Google patched a high-severity use-after-free vulnerability in Chromium's CSS engine exploited in the wild as a zero-day.

Google Chrome is killing all uBlock Origin bypasses, Microsoft Edge, Opera to follow - Neowin
Google Chrome removed the final feature flags that allowed uBlock Origin and other Manifest V2 extensions to function, with Edge and Opera expected to follow.
also on Google Chrome, #browser-engineering, #security
Build new features using built-in AI in Chrome | Blog
Chrome's built-in AI APIs (Summarizer, Prompt, Writer, Rewriter, Translator) let web apps run on-device models for tasks like headline generation, comment moderation, and translation, cutting cloud costs and keeping data private.
also on Google Chrome, #browser-engineering
Show HN: X86CSS – An x86 CPU emulator written in CSS
A developer created a fully functional x86 CPU emulator using only CSS, demonstrating Turing completeness of CSS, though it currently only runs in Chromium-based browsers.
also on Chromium, #browser-engineering
A first look at the Web Install API – Frontend Masters Blog
The Web Install API enters origin trial in Chromium, allowing any website to install a progressive web app with a single button click.
also on Chromium, #browser-engineering