Vulnerabilities
Chromium CVE-2026-110150: Privilege Elevation in Edge (Chromium)
A privilege‑elevation flaw (CVE‑2026‑110150) was found in Chromium, the engine used by Microsoft Edge. The bug can allow local users to gain higher privileges by exploiting a flaw in the rendering pipeline. Edge users should update to the latest release that contains the Chromium patch.
What happened
Chromium identified a privilege‑elevation vulnerability (CVE‑2026‑110150) that could be triggered by a local user through a crafted web page. The flaw resides in the rendering engine and can be abused to execute code with elevated rights.
Impact
Systems running Microsoft Edge (Chromium‑based) are affected. An attacker who can lure a user to a malicious site could potentially gain administrative privileges on the host machine.
What to do
- Verify the current Edge version. The patch is included in the latest Chromium update.
- Force an update via Windows Update or the Microsoft Edge update channel.
- Consider disabling the rendering engine for untrusted sites if policy allows.
- Monitor for suspicious privilege‑elevation activity in event logs.
Mitigation details
Microsoft Edge automatically incorporates Chromium security fixes. Updating to the newest Edge release ensures the CVE is remediated.
Related vulnerabilities
Microsoft Edge Vulnerability CVE-2026-106199: Incorrect Authorization
A critical authorization flaw (CVE-2026-106199) was discovered in the Chromium engine used by Microsoft Edge. Edge users running outdated versions are at risk of privilege escalation or unauthorized access. Defenders should update to the latest Edge release and monitor for anomalous authorization activity.
Read briefing
Microsoft Edge Addresses CVE-2026-106228 Confused Deputy Vulnerability
Microsoft Edge, built on Chromium, has patched CVE-2026-106228, a confused deputy flaw that could allow privilege escalation within the browser. The fix is included in the latest Chromium release; defenders should verify Edge is updated and monitor for anomalous activity.
Read briefing
Chromium CVE-2026-106237: Information Leak in Edge
A new Chromium vulnerability (CVE-2026-106237) leaks sensitive data in Edge and other Chromium-based browsers. Defenders should update to the latest Edge version and monitor for abnormal data exfiltration.
Read briefing
Chromium Authorization Bypass (CVE-2026-106250) Affects Edge
A missing authorization check in Chromium allows potential access to restricted functionality. Microsoft Edge, being Chromium-based, is affected. Defenders should prioritize applying the latest Edge updates to mitigate this vulnerability.
Read briefing