Critical vulnerability in WebP Codec has browser vendors scrambling for updates - eviltoast
A significant vulnerability in the WebP Codec has been unearthed, prompting major browser vendors, including Google and Mozilla (update: Mozilla has now

This affects all browsers and not just Chrome, as the media falsely reported it. Mozilla just rolled out a fix, and Brave is looking into it. This bug is likely related to the “zero-click” iOS 0day that was reported by Citizenlab last week.