Vulnerabilities
Chromium CVE‑2026‑106214: Information Leak Affects Microsoft Edge
A Chromium-based information‑leak flaw (CVE‑2026‑106214) is present in Microsoft Edge. Defenders should verify Edge is updated to the latest release and monitor for anomalous data exfiltration.
What happened
Chromium introduced CVE‑2026‑106214, a flaw that can leak internal data from the browser’s rendering engine. Microsoft Edge, built on Chromium, inherits the same code path.
Impact
Unpatched Edge instances may expose sensitive information such as URLs, cookies, or page content to malicious scripts or network observers. The vulnerability does not allow remote code execution but can facilitate data exfiltration.
Mitigation
- Update Microsoft Edge to the latest version (Edge 125 or newer).
- Verify that the update includes the Chromium patch for CVE‑2026‑106214.
- Enable browser sandboxing and content‑security policies to limit script privileges.
- Monitor network traffic for unusual outbound connections originating from the browser.
Related vulnerabilities
Chromium CVE-2026-95336: Information Leak in Transactions Platform
A new CVE‑2026‑95336 in Chromium’s Transactions Platform can leak sensitive data. The flaw affects Chrome and all Chromium‑based browsers, including Microsoft Edge. Defenders should apply the latest browser updates and verify the patch is in place.
Read briefing
Microsoft Edge (Chromium) Vulnerability CVE-2026-102322: Incorrect Authorization
A Chromium-based authorization flaw (CVE-2026-102322) affects Microsoft Edge. Edge users should update to the latest release to mitigate the risk.
Read briefing
Chromium CVE-2026-106370: Uninitialized Resource in Edge
A memory safety flaw (CVE‑2026‑106370) was found in Chromium’s handling of uninitialized resources. Microsoft Edge (Chromium‑based) incorporates this code, so the vulnerability affects all Edge users. Defenders should update to the latest Edge release and verify that the patch is applied.
Read briefing
Microsoft Edge Patch for CVE‑2026‑95375: BrowserTag Authorization Flaw
A Chromium BrowserTag authorization flaw (CVE‑2026‑95375) affects all Chromium‑based browsers. Microsoft Edge will receive the fix via its standard update channel. Defenders should update immediately and verify the patch.
Read briefing