Vulnerabilities
Chromium CVE-2026-110170: Use-After-Free Vulnerability Fixed in Edge
A use‑after‑free flaw in Chromium's rendering engine has been patched by Microsoft Edge. All users of the Chromium‑based Edge should update to the latest release to mitigate potential exploitation. Defenders should verify patch status and monitor for related activity.
What happened
A use‑after‑free vulnerability (CVE‑2026‑110170) was discovered in Chromium's rendering engine. The flaw could allow an attacker to execute arbitrary code after a memory object was freed.
Impact
Any process rendering untrusted web content could be compromised. Users of Microsoft Edge (Chromium‑based) and other Chromium‑based browsers are potentially affected until they apply the patch.
What to do
- Verify that your Edge version is 120.0.XXXX or later (the patch is included in the latest release).
- Force a browser update via Windows Update or the Edge update channel.
- Audit your systems for signs of exploitation, such as anomalous process creation or memory corruption events.
- Apply the same patch to any other Chromium‑based browsers you deploy.
Monitoring
Keep an eye on Microsoft Security Response Center for any follow‑up advisories or new exploitation techniques targeting this CVE.
Related vulnerabilities
Chromium CVE-2026-110145: Use-After-Free Vulnerability in Microsoft Edge (Chromium)
Microsoft Edge (Chromium-based) is affected by a use‑after‑free flaw (CVE‑2026‑110145) originating in Chromium. The issue is fixed in the latest Chromium releases; Edge users should update immediately. Defenders should verify patch status and monitor for exploitation attempts.
Read briefing
Microsoft Edge Patch for Chromium CVE-2026-110148 Use-After-Free Vulnerability
A use‑after‑free flaw in Chromium (CVE‑2026‑110148) has been fixed in the latest Microsoft Edge releases. Edge users should update immediately to mitigate potential exploitation. The patch is included in all current Edge builds.
Read briefing
Microsoft Edge Addresses Chromium CVE-2026-106268 Use‑After‑Free Vulnerability
A use‑after‑free flaw (CVE‑2026‑106268) was found in Chromium. Microsoft Edge (Chromium‑based) has integrated the fix. Defenders should update Edge to the latest version and monitor for exploitation attempts.
Read briefing
Microsoft Edge (Chromium) – CVE-2026-95319 Use-After-Free in Printing
A use‑after‑free flaw in the Chromium printing engine (CVE‑2026‑95319) can allow local code execution on systems running Microsoft Edge. The issue is already fixed in the latest Chromium releases. Edge users should update immediately and consider disabling printing until a patch is applied.
Read briefing