LUCAMEA vulnerability has been disclosed in Chromium, the open-source browser engine that underpins Google Chrome and Microsoft Edge. The flaw, tracked as CVE-2026-78894, is a race condition in the payments component. Race conditions occur when two processes compete to access the same resource at the wrong moment, which can lead to unexpected behaviour that an attacker might exploit. Details beyond the initial disclosure are limited at this stage.
What this means for your business
If your staff use Chrome or Edge for day-to-day work, including any online payments or client portals, you'll want to make sure those browsers are fully up to date. Both Chrome and Edge update automatically in the background, but it's worth checking that updates haven't been paused or blocked on managed devices. Your IT team should confirm patched versions are deployed across the business once a fix is available.