rootpwn

Vulnerabilities

Chromium CVE-2026-106393: Use‑After‑Free Exploit in Edge

A use‑after‑free flaw (CVE‑2026‑106393) was discovered in Chromium and is present in Microsoft Edge (Chromium‑based). The vulnerability can allow arbitrary code execution. Defenders should verify Edge/Chrome versions and apply the latest update.

What happened

A use‑after‑free vulnerability (CVE‑2026‑106393) was identified in Chromium’s rendering engine. The flaw can be triggered by malicious web content and may lead to arbitrary code execution.

Who is affected

All users of Microsoft Edge (Chromium‑based) and Google Chrome that run a version prior to the latest security release are vulnerable. The issue is tied to the Chromium core, so any Chromium‑based browser is impacted.

Impact

Exploit can allow an attacker to execute code with the privileges of the browser process, potentially compromising the host system.

Mitigation

  • Verify your browser version: Edge 125+ and Chrome 125+ contain the fix.
  • Apply the latest update immediately.
  • Configure automatic updates for browsers to avoid future exposure.
Microsoft recommends checking the Microsoft Security Response Center for any additional guidance.

Chromium CVE-2026-106393 Edge use-after-free patch update

← All news

Related vulnerabilities