Ah f... CVSS 10.0 dropped. Absolute meltdown incoming

Google just "upgraded" a Chrome Bug to a general 10.0

That is because the bug actually comes from the libwebp code which a shitload of apps use.

Just the display of a malicious image seems to be enough to run a RCE.

Cool. Aren't we all having fun?