Vulnerabilities
Chromium CVE-2026-106233: Use‑After‑Free Fixed in Latest Edge and Chrome
A use‑after‑free flaw (CVE‑2026‑106233) was discovered in Chromium and has been patched in recent releases of Google Chrome and Microsoft Edge. Defenders should verify that all Chromium‑based browsers are updated to the latest version to mitigate the risk.
What happened
A use‑after‑free vulnerability (CVE‑2026‑106233) was identified in the Chromium engine. The flaw could allow an attacker to execute arbitrary code by manipulating memory after a freed object was accessed.
Impact
Systems running unpatched Chromium‑based browsers—including Google Chrome and Microsoft Edge—are potentially exposed to remote code execution. The vulnerability is rated CVSS 8.8 (High).
What to do
- Confirm that Chrome and Edge are updated to the latest stable releases (Chrome 120+, Edge 120+).
- Use group policy or update management tools to enforce automatic updates for all Chromium‑based browsers.
- Monitor Microsoft Security Response Center (MSRC) and Google Chrome release notes for any additional mitigations.
- Consider disabling legacy plugins or extensions that may interact with the affected components.
Related vulnerabilities
Chromium CVE-2026-106393: Use‑After‑Free Exploit in Edge
A use‑after‑free flaw (CVE‑2026‑106393) was discovered in Chromium and is present in Microsoft Edge (Chromium‑based). The vulnerability can allow arbitrary code execution. Defenders should verify Edge/Chrome versions and apply the latest update.
Read briefing
Chromium CVE-2026-110153: Use-After-Free Fixed in Latest Edge and Chrome
A use‑after‑free flaw (CVE‑2026‑110153) was discovered in Chromium and addressed by Chrome. Microsoft Edge, which incorporates Chromium, has already applied the fix in its current releases. Defenders should verify that Edge and Chrome are updated to the latest version and monitor for any exploitation attempts.
Read briefing
Microsoft Edge Patch for Chromium CVE-2026-110148 Use-After-Free Vulnerability
A use‑after‑free flaw in Chromium (CVE‑2026‑110148) has been fixed in the latest Microsoft Edge releases. Edge users should update immediately to mitigate potential exploitation. The patch is included in all current Edge builds.
Read briefing
Chromium CVE-2026-110145: Use-After-Free Vulnerability in Microsoft Edge (Chromium)
Microsoft Edge (Chromium-based) is affected by a use‑after‑free flaw (CVE‑2026‑110145) originating in Chromium. The issue is fixed in the latest Chromium releases; Edge users should update immediately. Defenders should verify patch status and monitor for exploitation attempts.
Read briefing