CSS for malicious changes? First heard of it. I'd understand if it was JS we're talking about, but CSS? Lel.
Most likely some overflow exploits. I know Firefox used to have one until it was fixed.