Chrome
A widely used web browser developed by Google, featuring a large extension ecosystem. Recent versions have integrated AI capabilities such as Gemini Nano.
Core Facts
The V8 engine uses Just-In-Time (JIT) Compilation technology to compile JavaScript code directly into machine code rather than interpreting it line by line.
WebGPU is a W3C-standardized browser graphics and compute API that was officially released in Chrome in 2023, designed to replace WebGL.
The Chrome extension is based on the Manifest V3 architecture.
Timeline (last 90 days)
`:focus-visible` 的浏览器支持已相当成熟，Chrome、Firefox、Safari 及主流移动端均可用；但老版本浏览器会忽略该规则，因此保留一条 `:focus` 兜底样式更稳妥。
Building a complete, reliably reproducible Chrome exploit chain typically requires weeks or even months of reverse engineering and debugging.
AI security company XBOW disclosed that it took only six days to build a complete exploit chain targeting the Chrome browser, ultimately achieving remote code execution and popping the calculator.
The XBOW team named this operation "Zero to Calc," with the goal of completing a full Chrome exploit chain from scratch without any pre-existing vulnerability information.
The Chrome team has long operated one of the industry's largest fuzzing clusters (such as ClusterFuzz), producing tens of thousands of crash samples each year.
The CFI variants enabled in Chrome's renderer (such as Clang CFI) insert type checks at every indirect call site, and a mismatched jump will directly trigger a crash.
A complete Chrome exploit chain typically requires chaining multiple vulnerabilities, including an initial vulnerability in the renderer process, exploiting browser inter-process communication weaknesses for sandbox escape, and ultimately executing arbitrary code.
Even if an attacker gains full control of the renderer process through a memory corruption vulnerability, they must still find a second vulnerability independent of the renderer vulnerability to break through the isolation boundary.
Chrome uses a multi-process architecture, with webpage rendering work occurring in a restricted renderer process that is isolated by an operating-system-level sandbox and possesses only minimal system privileges.
Mitigations Chrome continuously deploys include site isolation, pointer compression, control flow integrity, and regular bug bounty programs.
40 more timeline events
All Facts (20)
The V8 engine uses Just-In-Time (JIT) Compilation technology to compile JavaScript code directly into machine code rather than interpreting it line by line.
85%VerifiedWebGPU is a W3C-standardized browser graphics and compute API that was officially released in Chrome in 2023, designed to replace WebGL.
80%VerifiedThe Chrome extension is based on the Manifest V3 architecture.
75%VerifiedManifest V3 is a new Chrome extension specification proposed by Google in 2020 and mandatorily enforced in 2023.
75%VerifiedDeepSeek Harness supports adding workspaces locally, and its overall form is similar to mainstream Agent tools such as Claude Code and OpenCode.
70%VerifiedAgent DevTools draws inspiration from Browser DevTools, allowing developers to inspect an AI Agent's internal operations similarly to how Chrome DevTools inspects page elements and network requests
70%VerifiedChrome extensions run content scripts through the Manifest V3 specification, allowing direct access to the DOM and injection of floating layers.
70%VerifiedApproximately 70% of high-severity security vulnerabilities in Chrome originate from memory safety issues in C++.
70%VerifiedThe Chrome DevTools Protocol (CDP) is a debugging interface exposed by the Chrome browser that allows external programs to control page navigation, execute JavaScript, capture screenshots, and intercept network requests.
65%VerifiedChrome browser's global market share has remained above 60% for many years.
65%VerifiedPuppeteer is a Node.js library launched by the Google Chrome team that provides programmatic control over the Chrome/Chromium browser.
65%VerifiedThe Canvas 2D context is CPU-based software rendering, suitable for simple 2D scenes; WebGL leverages GPU acceleration and is suited for high-performance rendering needs such as particle systems and lighting effects.
65%VerifiedMainstream browsers such as Chrome, Edge, Brave, and Opera are all based on the Chromium/Blink engine led by Google.
65%VerifiedWebMCP (Web Model Context Protocol) is a next-generation Web standard proposed to address the pain points of AI agents operating web pages.
65%VerifiedWebGPU是W3C正在推进的新一代Web图形与计算API标准，旨在替代WebGL，对标Vulkan、Metal、Direct3D 12
65%VerifiedChrome extensions follow the Manifest V3 specification and are composed of core files including the manifest.json configuration file, content scripts, and background service worker.
65%UnverifiedChrome DevTools Protocol通常需要以特殊调试模式启动浏览器实例，创建独立进程，与用户日常浏览器会话完全隔离
90%Unverifiedcurl和Python requests库的TLS握手签名与Chrome浏览器截然不同，容易被反爬系统识别
90%UnverifiedObsidian Web Clipper是一个Chrome插件，可以一键将网页转换为Markdown格式并保存到Obsidian中
90%Unverified谷歌通过RAPPOR协议将差分隐私用于Chrome浏览器统计
90%