Back Linuxsecurity

Fedora 43: Chromium High Insufficient Policy Enforcement CVE-2026

Linuxsecurity •LinuxSecurity Advisories • January 11, 2026

Chromium is an open-source web browser, powered by WebKit (Blink). Update Information : Update to 143.0.7499.192 * High CVE-2026-0628: Insufficient policy enforcement in WebView tag * Enable control flow integrity support for x86_64/aarch64 * Enable build for epel10.1

Chromium is an open-source web browser, powered by WebKit (Blink).

Update to 143.0.7499.192 * High CVE-2026-0628: Insufficient policy enforcement in WebView tag * Enable control flow integrity support for x86_64/aarch64 * Enable build for epel10.1

* Wed Jan 7 2026 Than Ngo - 143.0.7499.192-1 - Update tp 143.0.7499.192 * High CVE-2026-0628: Insufficient policy enforcement in WebView tag - Fix rhbz#2425338, Enable control flow integrity support for x86_64/aarch64 - Enable build for epel10.1

[ 1 ] Bug #2425338 - Please re-enable CFI build option [ 2 ] Bug #2425439 - Chromium not updated RHEL 10

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-66162d01ae' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

High Vulnerability in Chromium WebView Tag Identified (CVE-2026-0628) A high severity vulnerability (CVE-2026-0628) has been identified in Chromium's WebView tag, which involves insufficient policy enforcement. This affects users of the Chromium web browser, prompting an update to version 143.0.7499.192. The update also includes enabling control flow integrity support for x86_64/aarch64 architectures. 3 sources 31

Extracted Entities

Companies (1)

Fedora

CVEs (1)

CVE-2026-0628