Brush exploit can cause any Chromium browser to collapse in 15-60 seconds

A severe vulnerability named Brash has been discovered in Chromium’s Blink rendering engine, capable of crashing Chromium-based browsers within seconds by exploiting the lack of rate limiting in the document.title API. This exploit can be weaponized for timed attacks, potentially impacting over 3 billion users and disrupting AI agents and headless browsers.

Edward Kiledjian @ekiledjian