Vulnerabilities
Chromium CVE-2026-110168: Use-After-Free Vulnerability in Chrome and Edge
A use‑after‑free flaw in Chromium’s rendering engine can lead to arbitrary code execution when a malicious web page is rendered. The issue is present in all current releases of Google Chrome and Microsoft Edge (Chromium‑based). Defenders should verify that their browsers are updated to the latest patched versions and monitor for exploitation attempts.
What happened
A use‑after‑free bug in Chromium’s rendering engine was discovered and assigned CVE‑2026‑110168. The flaw can be triggered by a crafted web page and may lead to arbitrary code execution in the browser process.
Impact
All users of Google Chrome and Microsoft Edge (Chromium‑based) running affected versions are at risk. The vulnerability can be exploited remotely without user interaction if the user visits a malicious site.
Mitigation
- Update Chrome to the latest stable release (currently 120.x or newer).
- Update Edge to the latest stable release (currently 120.x or newer).
- Microsoft will ship the patch in the next Edge update; ensure automatic updates are enabled.
What to do
Verify the browser version on all endpoints. If the version is older than the patched release, schedule an update. Enable browser security features such as Safe Browsing and sandboxing. Monitor endpoint logs for anomalous browser activity and block known malicious URLs associated with the exploit.
Edge inherits the Chromium patch automatically; no separate action required beyond updating.
Related vulnerabilities
Chromium CVE-2026-106393: Use‑After‑Free Exploit in Edge
A use‑after‑free flaw (CVE‑2026‑106393) was discovered in Chromium and is present in Microsoft Edge (Chromium‑based). The vulnerability can allow arbitrary code execution. Defenders should verify Edge/Chrome versions and apply the latest update.
Read briefing
Chromium CVE-2026-110153: Use-After-Free Fixed in Latest Edge and Chrome
A use‑after‑free flaw (CVE‑2026‑110153) was discovered in Chromium and addressed by Chrome. Microsoft Edge, which incorporates Chromium, has already applied the fix in its current releases. Defenders should verify that Edge and Chrome are updated to the latest version and monitor for any exploitation attempts.
Read briefing
Microsoft Edge Addresses Chromium CVE-2026-106268 Use‑After‑Free Vulnerability
A use‑after‑free flaw (CVE‑2026‑106268) was found in Chromium. Microsoft Edge (Chromium‑based) has integrated the fix. Defenders should update Edge to the latest version and monitor for exploitation attempts.
Read briefing
Microsoft Edge Addresses Chromium CVE‑2026‑110167 Use‑After‑Free Vulnerability
A use‑after‑free flaw (CVE‑2026‑110167) was found in Chromium. Microsoft Edge (Chromium‑based) has applied the fix. Defenders should verify Edge is updated to the latest release and monitor for anomalous activity.
Read briefing