Posted on
DotNetBrowser 4.3.5
Chromium 156.0.8078.74
We upgraded Chromium to a newer version, which introduces 52 security fixes. Among them:
- CVE-2026-118306: Memory corruption in FileSystem
- CVE-2026-118331: Improper input validation in FileAPI
- CVE-2026-118348: Improper input validation in Skia
- CVE-2026-118344: Use after free in Layout
- CVE-2026-118357: Use after free in FileSystem
See the Chromium release announcement for more details.
Quality enhancements
- Fixed memory leaks in Avalonia views after browser disposal while the host window remained open. This affected off-screen rendering on Windows, Linux, and macOS, and hardware-accelerated rendering on macOS.
- On macOS, loading DotNetBrowser’s native libraries no longer makes Chromium’s allocator the default malloc zone for the .NET application process. This prevents unrelated native allocations in the same process from going through Chromium’s allocator.
- Removed trust for the emSign ECC Root CA - G3 root certificate. DotNetBrowser now rejects the affected eMudhra certificate hierarchy in line with Chrome’s distrust decision.
SBOM
This section provides the Software Bill of Materials (SBOM) for DotNetBrowser 4.3.5 in CycloneDX format. The file lists the following software components:
- the third-party libraries used by DotNetBrowser,
- the Chromium build used by DotNetBrowser,
- the third-party components DotNetBrowser inherits from Chromium.
Download DotNetBrowser 4.3.5
Please share your email with us, and we'll send you download instructions.
We were unable to send the email. Please try again.
If you are a registered customer you don’t need to do anything to use this update.
If you would like to evaluate the product, you need an evaluation license.
Follow @DotNetBrowser to get notified of the library updates.
Subscribe to our RSS feed to get instant updates on new releases.
Subscribe to get notifications about the latest releases.