Google: Chrome Zero-Day Was Used Together With a Windows 7 Zero-Day (zdnet.com)

Google said this week that a Chrome zero-day the company patched last week was actually used together with a second one, a zero-day impacting the Microsoft Windows 7 operating system. From a report: The two zero-days were part of ongoing cyber-attacks that Clement Lecigne, a member of Google's Threat Analysis Group, discovered last week on February 27. The attackers were using a combination of a Chrome and Windows 7 zero-days to execute malicious code and take over vulnerable systems. The company revealed the true severity of these attacks in a blog post this week. Google said that Microsoft is working on a fix, but did not give out a timeline. The company's blog post comes to put more clarity into a confusing timeline of events that started last Friday, March 1, when Google released Chrome 72.0.3626.121, a new Chrome version that included one solitary security fix (CVE-2019-5786) for Chrome's FileReader --a web API that lets websites and web apps read the contents of files stored on the user's computer.

Comments

Re:Browser, everything and the kitchen sink

[xonen]

Firefox was never about being small and light weight, it was about being able to render websites faster and in a standard compliant way.

I hate to correct you, cause on other points you are right, but no.
Firefox came as spin-off from the Mozilla suite. Mozilla targeted compliant browsing.

Firefox was from day one meant as a light weight browser with only one feature: browsing websites. No composer, no e-mail, no fancies and initially not even plugins. Low on memory. Low on megabytes of code. Fast.

From there it went it's own way exactly as parent poster described.