A significant vulnerability in the WebP Codec has been unearthed, prompting major browser vendors, including Google and Mozilla (update: Mozilla has now
This affects all browsers and not just Chrome, as the media falsely reported it. Mozilla just rolled out a fix, and Brave is looking into it. This bug is likely related to the "zero-click" iOS 0day that was reported by Citizenlab last week.