Vulnerabilities
Chromium CVE-2026-110166: Buffer Overflow in Chrome and Edge
A buffer overflow flaw (CVE‑2026‑110166) in Chromium can be triggered by malicious web content, affecting both Google Chrome and Microsoft Edge. The vulnerability allows arbitrary code execution. Defenders should update browsers to the latest patch and verify auto‑update settings.
What Happened
A buffer overflow was identified in Chromium’s rendering engine. The flaw can be exploited when a user visits a crafted web page, potentially leading to arbitrary code execution.
Impact
Both Google Chrome and Microsoft Edge (Chromium‑based) are affected. Attackers could gain full system compromise if the vulnerability is triggered.
Mitigation
- Update Chrome and Edge to the latest stable releases.
- Ensure automatic updates are enabled on all endpoints.
- Apply any vendor‑supplied security patches as soon as they are released.
Recommended Actions
Verify that all user machines are running the patched browser versions. Monitor for any anomalous activity that could indicate exploitation attempts.
Related vulnerabilities
Microsoft Edge Patch for CVE‑2026‑95349: WebGL Buffer Overflow
A buffer overflow in WebGL was identified in Chromium, impacting all Chromium‑based browsers including Microsoft Edge. Microsoft has fixed the issue in the latest Edge release. Defenders should update Edge, verify the patch, and monitor for exploitation attempts.
Read briefing
Chromium CVE-2026-95350: Buffer Overflow in ANGLE Affects Edge
A buffer overflow in ANGLE within Chromium (CVE-2026-95350) can allow remote code execution when rendering malicious content. Microsoft Edge, built on Chromium, inherits this flaw. Defenders should update to the latest Edge release or apply vendor patches immediately.
Read briefing
Chromium CVE-2026-106292: Buffer Overflow Fixed in Latest Edge Release
A buffer‑overflow flaw in Chromium (CVE‑2026‑106292) has been patched in the newest Microsoft Edge build. Edge users are affected, and defenders should ensure the browser is updated and monitor for exploitation attempts.
Read briefing
Chromium CVE-2026-95284: Buffer Overflow in ANGLE Affects Microsoft Edge
A buffer overflow in Chromium’s ANGLE component (CVE-2026-95284) can lead to memory corruption. Microsoft Edge (Chromium‑based) inherits the flaw and is vulnerable until patched. Defenders should update Edge to the latest release and monitor for exploitation activity.
Read briefing