![\"Google](\"https:\/\/www.newsbeep.com\/au\/wp-content\/uploads\/2025\/10\/1761910869_974_960x0.jpg\")
<\/p>\n<\/p>\n
Beware unfixed ‘Brash’ Chrome vulnerability that crashes your browser.<\/p>\n
Photothek via Getty Images<\/p>\n
It was the best of times, it was the worst of times. Dickens could easily have been writing about Google Chrome users given the last few days. Two emergency updates<\/a> followed by news of 20 security vulnerabilities<\/a> with another patch. The best of times? Well, Chrome has said it is making the browser more secure, but not until 2026<\/a>, which kind of counts, as do those security fixes if you ask me. What falls firmly into the worst category, however, is news of a new vulnerability called Brash that can crash your Chrome browser and impacts 3 billion users. Oh, and there\u2019s no fix right now. Here\u2019s what you need to know. <\/p>\n ForbesNew Research Claims iPhone Less Safe Than Google Android PhonesBy Davey Winder<\/a>What Is The Google Chrome Crashing Brash Vulnerability?<\/p>\n Security researcher Jose Pino contacted Forbes to reveal that he had found a critical vulnerability in the Blink rendering engine used in Chrome, and other web browsers that are built around the Chromium model, and demonstrated a proof-of-concept exploit to me that did, indeed, cause my Chrome browser to freeze and require restarting. <\/p>\n Pino calls this exploit Brash<\/a>, based upon a vulnerability that causes \u201cany Chromium browser to collapse in 15-60 seconds by exploiting an architectural flaw in how certain DOM operations are managed.\u201d The document object model, simply put, connects web pages to programming languages or scripts.<\/p>\n Pino was able to show that there is no rate limiting on document.title application programming interface updates, and that, dear reader, means that millions of \u2018DOM mutations\u2019 per second can be injected in order to cause the interface to collapse and the browser to freeze. \u201cThe impact is significant,\u201d Pino warned, \u201cit consumes high CPU resources, degrades overall system performance, and can halt or slow down other processes running simultaneously.\u201d What\u2019s more, it affects desktop and Android browsers.<\/p>\n ForbesGoogle Security Gets Game As Inoculation Theory Put To The TestBy Davey Winder<\/a><\/p>\n