Vulnerabilities
Chromium CVE-2026-106237: Information Leak in Edge
A new Chromium vulnerability (CVE-2026-106237) leaks sensitive data in Edge and other Chromium-based browsers. Defenders should update to the latest Edge version and monitor for abnormal data exfiltration.
What happened
A recent vulnerability (CVE-2026-106237) in Chromium causes an information leak that can expose sensitive data to malicious web pages. The flaw was identified by Google Chrome and is present in all Chromium-based browsers until patched.
Impact
Microsoft Edge (Chromium-based) and other Chromium-derived browsers are affected. The leak can allow an attacker to read data from the browser’s memory or local storage that should be isolated, potentially exposing credentials, session tokens, or other confidential information.
What defenders should do
- Verify the current Edge version: Edge 120 and later include the fix.
- Deploy the latest Edge update across all endpoints.
- Audit browser logs for unusual data exfiltration patterns.
- Consider disabling or restricting access to local storage APIs in high-risk environments.
Mitigation guidance
Microsoft has incorporated the Chromium patch into Edge 120+. Ensure that the Windows Update service is enabled and that Edge is set to auto-update. If manual deployment is required, use the Microsoft Edge Enterprise landing page for the latest MSI installers.
Additional resources
Microsoft Security Response Center (MSRC) and the Chromium project maintain release notes. Refer to the MSRC portal for detailed version information.
Related vulnerabilities
Chromium CVE‑2026‑106214: Information Leak Affects Microsoft Edge
A Chromium-based information‑leak flaw (CVE‑2026‑106214) is present in Microsoft Edge. Defenders should verify Edge is updated to the latest release and monitor for anomalous data exfiltration.
Read briefing
Chromium CVE-2026-95336: Information Leak in Transactions Platform
A new CVE‑2026‑95336 in Chromium’s Transactions Platform can leak sensitive data. The flaw affects Chrome and all Chromium‑based browsers, including Microsoft Edge. Defenders should apply the latest browser updates and verify the patch is in place.
Read briefing
Chromium CVE-2026-95312: Password Information Leak in Edge
A flaw in Chromium’s password handling can leak credentials. Microsoft Edge users are affected and should update immediately. Defenders should verify patch status and monitor for exposed data.
Read briefing
Microsoft Edge Addresses Chromium CVE-2026-106336 Vulnerability
A recent CVE‑2026‑106336 flaw in Chromium has been mitigated in Microsoft Edge (Chromium‑based). Edge users should apply the latest update to eliminate the risk. Defenders should verify patch status and monitor for exploitation attempts.
Read briefing