Vulnerabilities
Chromium CVE-2026-106370: Uninitialized Resource in Edge
A memory safety flaw (CVE‑2026‑106370) was found in Chromium’s handling of uninitialized resources. Microsoft Edge (Chromium‑based) incorporates this code, so the vulnerability affects all Edge users. Defenders should update to the latest Edge release and verify that the patch is applied.
What happened
Chromium identified a bug where an uninitialized resource could be accessed during rendering. The flaw is classified as a memory safety issue that could potentially lead to information disclosure or denial of service.
Impact
Microsoft Edge users are affected because Edge is built on the same Chromium engine that contains the vulnerable code. The severity is not yet rated, but the nature of the bug suggests it could be exploitable by a malicious web page.
Mitigation
Microsoft has incorporated the Chromium fix into the latest Edge releases. The patch removes the uninitialized resource path and adds bounds checks.
What to do
1. Verify that your Edge version is 120.0.0 or newer.
2. If not, install the latest update immediately.
3. Monitor Microsoft’s security advisories for any additional guidance.
Related vulnerabilities
Chromium CVE-2026-95324: Uninitialized GPU Resource Vulnerability
A flaw in Chromium’s GPU handling allows an attacker to exploit an uninitialized resource, potentially leading to memory corruption or arbitrary code execution. Microsoft Edge, built on Chromium, incorporates the same fix, so updating to the latest Edge version mitigates the risk. Defenders should verify Edge is current and monitor GPU activity for anomalies.
Read briefing
Microsoft Edge (Chromium) CVE-2026-106376: Uninitialized Resource Vulnerability
Microsoft Edge users may be affected by CVE-2026-106376, an uninitialized resource flaw in Chromium that could allow memory corruption and arbitrary code execution. Defenders should verify Edge versions, apply the latest update, and monitor for anomalous activity.
Read briefing
Chromium CVE-2026-106273: Uninitialized Resource Vulnerability in Edge
Microsoft Edge, built on Chromium, is affected by CVE-2026-106273, a flaw that can trigger memory corruption or denial‑of‑service conditions. The issue is addressed in the latest Edge release. Defenders should update immediately and monitor for anomalous crashes.
Read briefing
Chromium CVE-2026-106339: Use of Released Resource Fixed in Edge
Microsoft Edge (Chromium-based) has addressed the CVE-2026-106339 vulnerability that allowed the use of a released resource. Defenders should ensure Edge is updated to the latest version and monitor for anomalous resource handling behavior.
Read briefing