Fuzio 2026.9.0

Breaking changes 

Windows registry extensions 

On Windows, Fuzio no longer installs extensions registered in the Windows registry. This prevents an embedded browser from loading extension code that the application did not request.

Applications that need an extension should install it through their own application-controlled extension setup instead of relying on Chrome extension registry entries.

Chromium 154.0.8037.58 

We upgraded Chromium to a newer version, which introduces 166 security fixes. Among them:

• CVE-2026-91726: Out of bounds read in WebGL
• CVE-2026-91721: Use after free in Internals
• CVE-2026-91749: Use after free in Workers
• CVE-2026-93374: Use after free in Dawn
• CVE-2026-91724: Use after free in Input

See the Chromium release announcements for more details:

• September 15
• September 17
• September 22

Quality enhancements 

• Fixed a Chromium process crash that could occur after a web page started a Presentation API request and the application answered StartPresentationCallback.
• Compressed response bodies written by UrlRequestJob in InterceptUrlRequestCallback are now decoded according to the Content-Encoding header. This lets intercepted HTML, scripts, and styles load as decoded content instead of raw compressed bytes.
• Fixed browser.devTools().show() on macOS so the DevTools window is visible again.
• Disabled network requests from Chromium’s on-device AI component to Google’s update service.
• Enabled JUnit Platform for Kotlin tests.