Chromium CVE-2026-106358: Use-After-Free Vulnerability Affects Microsoft Edge

A use‑after‑free vulnerability (CVE‑2026‑106358) was discovered in Chromium, the engine powering Microsoft Edge. The flaw can allow an attacker to execute arbitrary code if a malicious web page is loaded.

What Happened

Google identified the issue and released a patch in the Chromium update stream. Edge inherits the fix automatically when the browser updates.

Impact

All users of Microsoft Edge on any platform that runs the affected Chromium version are potentially exposed until the browser is updated. The vulnerability is rated high severity due to its ability to execute code.

What to Do

• Ensure Microsoft Edge is updated to the latest version (check via Settings → About Microsoft Edge).
• Verify that the update includes the Chromium patch; the release notes will reference CVE‑2026‑106358.
• Monitor logs for anomalous activity that could indicate exploitation attempts.

Edge updates are delivered through Windows Update or the browser’s own update mechanism; no manual intervention is required beyond keeping the browser current.