Vulnerabilities
Chromium CVE-2026-106345: Use of Released Resource Exploit in Edge and Chrome
A recently identified Chromium flaw (CVE‑2026‑106345) allows use of a released resource, potentially enabling memory corruption. The issue is present in all current Chrome and Chromium‑based Edge releases until patched. Defenders should verify that browsers are updated to the latest security builds and monitor for anomalous memory usage.
What happened
Chrome identified a flaw where a released resource could still be accessed, leading to potential memory corruption. The bug is tracked as CVE‑2026‑106345.
Impact
All Chrome and Chromium‑based Edge installations that have not applied the latest security update are vulnerable. The flaw could be leveraged to execute arbitrary code or cause a denial of service.
Defender actions
- Confirm that Chrome and Edge are running the latest patched versions (check the version number against the official release list).
- Force a browser update via group policy or update management tools.
- Enable browser sandboxing and restrict third‑party extensions.
- Monitor system logs for signs of memory corruption or repeated crashes.
- Apply any vendor‑supplied mitigations if the update is delayed.
Additional guidance
Microsoft Edge inherits the Chromium patch, so updating Edge automatically resolves the issue. For environments that rely on legacy Edge (EdgeHTML), the vulnerability does not apply.
Related vulnerabilities
Chromium CVE-2026-106339: Use of Released Resource Fixed in Edge
Microsoft Edge (Chromium-based) has addressed the CVE-2026-106339 vulnerability that allowed the use of a released resource. Defenders should ensure Edge is updated to the latest version and monitor for anomalous resource handling behavior.
Read briefing
Chromium CVE-2026-95324: Uninitialized GPU Resource Vulnerability
A flaw in Chromium’s GPU handling allows an attacker to exploit an uninitialized resource, potentially leading to memory corruption or arbitrary code execution. Microsoft Edge, built on Chromium, incorporates the same fix, so updating to the latest Edge version mitigates the risk. Defenders should verify Edge is current and monitor GPU activity for anomalies.
Read briefing
Chromium CVE-2026-106393: Use‑After‑Free Exploit in Edge
A use‑after‑free flaw (CVE‑2026‑106393) was discovered in Chromium and is present in Microsoft Edge (Chromium‑based). The vulnerability can allow arbitrary code execution. Defenders should verify Edge/Chrome versions and apply the latest update.
Read briefing
Chromium CVE-2026-110153: Use-After-Free Fixed in Latest Edge and Chrome
A use‑after‑free flaw (CVE‑2026‑110153) was discovered in Chromium and addressed by Chrome. Microsoft Edge, which incorporates Chromium, has already applied the fix in its current releases. Defenders should verify that Edge and Chrome are updated to the latest version and monitor for any exploitation attempts.
Read briefing