Google Patches High-Severity “WebView” Flaw in Chrome 143

Google has announced a high-severity patch for the Stable channel of Chrome, rolling out to Windows, Mac and Linux users to address CVE-2026-0628, described as “Insufficient policy enforcement in WebView tag.” The update lifts Chrome to version 143.0.7499.192/.193 for Windows and macOS, and 143.0.7499.192 for Linux, with a single security fix deemed significant enough to warrant immediate attention.

The vulnerability was reported by security researcher Gal Weizman on 23 November 2025, and Google notes that full bug details will be restricted until a majority of users have updated to prevent threat actors from reverse-engineering the patch. The flaw relates to the <webview> tag, which can allow malicious content to bypass security restrictions or escape the sandboxed environment if policies are not enforced correctly. Users can manually trigger the update by navigating to Help > About Google Chrome in their browser.