Vulnerabilities
Chromium Contextual Tasks authorization flaw (CVE-2026-95297) affects Chromium-based browsers
Chromium has assigned CVE-2026-95297 for a missing authorization issue in Contextual Tasks. The advisory indicates the fix is being addressed in Chromium and will be ingested by Chromium-based products such as Microsoft Edge. Defenders should deploy current stable browser builds, verify deployed versions, and monitor vendor release notes for exact version ranges and severity.
What happened
Chromium reported CVE-2026-95297, a missing authorization issue in the Contextual Tasks component. The available advisory text does not specify CVSS, affected version ranges, or exploit status. Microsoft Edge, as a Chromium-based browser, is expected to receive the correction through its Chromium ingestion process.
Impact
- Chromium-based browsers may be affected until the updated Chromium code is deployed.
- Microsoft Edge users should treat this as a browser update item, especially in managed environments where patching is delayed.
- Because the advisory is brief, impact scope should be confirmed against vendor release notes and internal browser inventory.
What to do
- Deploy the latest stable Chrome and Microsoft Edge builds, or the latest approved enterprise channel, as soon as available.
- Verify installed browser versions on endpoints, kiosks, and managed devices.
- Review whether Contextual Tasks are enabled and limit usage to trusted profiles where product controls allow it.
- Track Chrome and Edge release notes for the exact fixed versions, severity, and any additional mitigation guidance.
Related vulnerabilities
Microsoft Edge Patch for CVE‑2026‑95375: BrowserTag Authorization Flaw
A Chromium BrowserTag authorization flaw (CVE‑2026‑95375) affects all Chromium‑based browsers. Microsoft Edge will receive the fix via its standard update channel. Defenders should update immediately and verify the patch.
Read briefing
Chromium CVE‑2026‑95352: DevTools Authorization Flaw Fixed in Edge
A recent CVE‑2026‑95352 flaw in Chromium’s DevTools allowed an attacker to bypass authorization checks and gain privileged access to debugging functions. Microsoft Edge (Chromium‑based) has incorporated the fix. Defenders should ensure browsers are updated and monitor DevTools usage.
Read briefing
Chromium CVE-2026-95336: Information Leak in Transactions Platform
A new CVE‑2026‑95336 in Chromium’s Transactions Platform can leak sensitive data. The flaw affects Chrome and all Chromium‑based browsers, including Microsoft Edge. Defenders should apply the latest browser updates and verify the patch is in place.
Read briefing
CVE-2026-95314: Incorrect Authorization in Chromium HID – Edge Users Must Update
A flaw in Chromium’s HID handling allows improper authorization, affecting all Chromium‑based browsers including Microsoft Edge. The issue is fixed in the latest Chromium releases, and Edge will receive the patch in its next update. Defenders should verify their browser versions and apply updates immediately.
Read briefing