Google publishes exploit code threatening millions of Chromium users

Google published proof-of-concept exploit code for a Chromium vulnerability that has remained unpatched since late 2022.

The bug can let a malicious site abuse the Browser Fetch API to keep connections open, watch activity, and route proxy traffic.

Affected Chromium-based browsers include Chrome and Microsoft Edge, widening the potential impact.

Security experts warn the flaw could help attackers build browser botnets for surveillance, proxying, or DDoS-style abuse, especially when chained with another exploit.