Major web browsers, including Google Chrome, Mozilla Firefox, and Microsoft Edge, are still using outdated Chromium versions. According to a publicly available tracker, these browsers have not yet updated to the latest Chromium releases, versions 113 and 114. This discrepancy leaves users vulnerable to security exploits and feature gaps.
Overview
The Chromium project has a rapid release cycle, which can make it challenging for browsers to keep pace. When a browser ships an older Chromium version, its users are exposed to known, already-patched security vulnerabilities. Attackers can exploit these flaws since the fixes are public in Chromium's source but not yet shipped to users of the lagging browser.
What it means for users and developers
Users on older Chromium versions also don't get the latest Web APIs and features available to websites, resulting in website compatibility issues. This can lead to a poor user experience and limit the functionality of websites. Developers may also face challenges when trying to create websites that work across different browsers and versions.
Tradeoffs
The complexity of browser maintenance and the challenges of keeping pace with the Chromium project's rapid release cycle contribute to the discrepancy. Browsers must balance the need to update to the latest Chromium version with the need to ensure stability and compatibility.
In conclusion, the gap between the latest Chromium releases and the versions used by major web browsers has significant implications for users and developers. Users can check their browser's Chromium version to see if they are vulnerable to security exploits and feature gaps.