Vulnerabilities
Chromium CVE-2026-106339: Use of Released Resource Fixed in Edge
Microsoft Edge (Chromium-based) has addressed the CVE-2026-106339 vulnerability that allowed the use of a released resource. Defenders should ensure Edge is updated to the latest version and monitor for anomalous resource handling behavior.
What happened
A flaw in Chromium’s resource management permitted the use of a released resource, potentially leading to undefined behavior or exploitation. The issue was identified and assigned CVE-2026-106339 by the Chrome team.
Who is affected
All users running Microsoft Edge (Chromium-based) that rely on the underlying Chromium engine are potentially impacted until the fix is applied.
Impact
While the vulnerability does not directly expose data, improper resource handling could allow attackers to trigger crashes or execute unintended code paths.
Mitigation
- Verify that Microsoft Edge is updated to the latest release (version X.X.X).
- Deploy the update through your organization’s standard update channel.
- Monitor logs for abnormal resource allocation or crashes.
What to do next
Apply the latest Edge update immediately. No additional configuration changes are required beyond standard patch management.
Related vulnerabilities
Chromium CVE-2026-106345: Use of Released Resource Exploit in Edge and Chrome
A recently identified Chromium flaw (CVE‑2026‑106345) allows use of a released resource, potentially enabling memory corruption. The issue is present in all current Chrome and Chromium‑based Edge releases until patched. Defenders should verify that browsers are updated to the latest security builds and monitor for anomalous memory usage.
Read briefing
Microsoft Edge Mobile UI Misrepresentation – CVE-2026-95288
Microsoft Edge on mobile devices is affected by CVE-2026-95288, a Chromium-based UI misrepresentation flaw. The issue is fixed in newer Chromium builds; update Edge to the latest version to mitigate.
Read briefing
Chromium CVE-2026-110145: Use-After-Free Vulnerability in Microsoft Edge (Chromium)
Microsoft Edge (Chromium-based) is affected by a use‑after‑free flaw (CVE‑2026‑110145) originating in Chromium. The issue is fixed in the latest Chromium releases; Edge users should update immediately. Defenders should verify patch status and monitor for exploitation attempts.
Read briefing
Microsoft Edge (Chromium) – CVE-2026-95319 Use-After-Free in Printing
A use‑after‑free flaw in the Chromium printing engine (CVE‑2026‑95319) can allow local code execution on systems running Microsoft Edge. The issue is already fixed in the latest Chromium releases. Edge users should update immediately and consider disabling printing until a patch is applied.
Read briefing