--- title: Security hole slams Chromium browsers - no fix yet description: A critical unpatched vulnerability in Chromium's Blink rendering engine allows attackers to crash browsers within seconds by exploiting the lack of rate... canonical: https://daily.dev/posts/security-hole-slams-chromium-browsers---no-fix-yet-lfeohecbn twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Security hole slams Chromium browsers - no fix yet | daily.dev og:description: A critical unpatched vulnerability in Chromium's Blink rendering engine allows attackers to crash browsers within seconds by exploiting the lack of rate... og:url: https://daily.dev/posts/security-hole-slams-chromium-browsers---no-fix-yet-lfeohecbn og:image: https://api.daily.dev/og/posts/lfeoHeCBn.png og:image:alt: Security hole slams Chromium browsers - no fix yet og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Security hole slams Chromium browsers - no fix yet **[The Register](https://daily.dev/sources/theregister)** · 4 min read · 3 upvotes · 0 comments ## Summary A critical unpatched vulnerability in Chromium's Blink rendering engine allows attackers to crash browsers within seconds by exploiting the lack of rate limiting on document.title API updates. The flaw affects Chrome, Edge, Brave, and other Chromium-based browsers (versions 143.0.7483.0+), impacting over 3 billion users. The exploit injects millions of DOM mutations per second, saturating the main thread and causing browser collapse. Security researcher Jose Pino disclosed the bug to Chromium in August but received no response, prompting public disclosure. Firefox and Safari are unaffected due to different rendering engines. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Google patches new Chrome zero-day flaw exploited in the wild](https://daily.dev/posts/google-patches-new-chrome-zero-day-flaw-exploited-in-the-wild-tpectayr9) · BleepingComputer · 1 upvotes · 0 comments - [Rebane: "back in 2022 i found a bug tha…"](https://daily.dev/posts/rebane-back-in-2022-i-found-a-bug-tha--op3lghfl7) · Lobsters · 0 upvotes · 0 comments - [Chrome's zero-day Whac-A-Mole continues with fifth exploited bug of the year](https://daily.dev/posts/chrome-s-zero-day-whac-a-mole-continues-with-fifth-exploited-bug-of-the-year-nnyrealf4) · The Register · 1 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#javascript](https://daily.dev/tags/javascript), [#vulnerability](https://daily.dev/tags/vulnerability), [#chromium](https://daily.dev/tags/chromium) [View this post on daily.dev](https://daily.dev/posts/security-hole-slams-chromium-browsers---no-fix-yet-lfeohecbn) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Security hole slams Chromium browsers - no fix yet","url":"https://daily.dev/posts/security-hole-slams-chromium-browsers---no-fix-yet-lfeohecbn","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/security-hole-slams-chromium-browsers---no-fix-yet-lfeohecbn"},"datePublished":"2025-10-29T19:53:48.401Z","dateModified":"2025-10-30T16:09:59.103Z","description":"A critical unpatched vulnerability in Chromium's Blink rendering engine allows attackers to crash browsers within seconds by exploiting the lack of rate...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/cdae4b0e296d1b8a31fa8e1cec107f85?_a=AQAEulh","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/cdae4b0e296d1b8a31fa8e1cec107f85?_a=AQAEulh","isAccessibleForFree":true,"articleSection":"The Register","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"The Register","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/66aa2113fdad463992ffcbf0e8963fda","url":"https://daily.dev/sources/theregister"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/security-hole-slams-chromium-browsers---no-fix-yet-lfeohecbn","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":3},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,javascript,vulnerability,chromium","timeRequired":"PT4M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"The Register","item":"https://daily.dev/sources/theregister"},{"@type":"ListItem","position":3,"name":"Security hole slams Chromium browsers - no fix yet"}]} ```