Chromium CVE-2026-110145: Use-After-Free Vulnerability in Microsoft Edge (Chromium)

What happened

A use‑after‑free vulnerability (CVE‑2026‑110145) was discovered in the Chromium engine. The flaw can allow an attacker to execute arbitrary code by manipulating memory after an object has been freed.

Impact

All browsers built on Chromium—including Microsoft Edge—are potentially vulnerable until the patch is applied. The vulnerability could lead to remote code execution if a malicious web page is loaded.

Defender actions

• Ensure Microsoft Edge is updated to the latest version (Edge 125 or later).
• Verify that the underlying Chromium engine has incorporated the fix (check release notes).
• Deploy endpoint protection that blocks exploitation of use‑after‑free patterns.
• Monitor logs for anomalous memory access or crashes that could indicate exploitation.

Further information

See Google Chrome release notes for details on the fix and affected versions.