Vulnerabilities
Chromium CVE-2026-87455: Use‑after‑free in Aura Affects Microsoft Edge
A use‑after‑free flaw in Chromium’s Aura layer (CVE‑2026‑87455) can allow arbitrary code execution. Microsoft Edge, built on Chromium, inherits the issue and is fixed in the latest releases. Defenders should update Edge and monitor for patches.
What happened
A use‑after‑free bug was discovered in Chromium’s Aura UI framework (CVE‑2026‑87455). The flaw can be triggered by malformed input and may lead to arbitrary code execution if an attacker can control the memory layout.
Impact
Microsoft Edge, which is built on Chromium, inherits the vulnerability. Any user running an affected Edge version could be compromised if the flaw is exploited in a browser context.
What to do
- Verify the Edge version on all endpoints. The latest stable release (Edge 121 and newer) contains the fix.
- Apply the update via Windows Update or the Microsoft Edge update channel immediately.
- Enable automatic updates for Edge and Chrome to receive future patches without manual intervention.
- Monitor Microsoft security advisories for any additional mitigations or workarounds.
Related vulnerabilities
Chromium CVE‑2026‑95356: Use‑After‑Free in WindowDialog
A use‑after‑free flaw in Chromium’s WindowDialog component (CVE‑2026‑95356) can enable arbitrary code execution via malicious web content. Microsoft Edge, which incorporates Chromium, is affected until the patch is applied. Defenders should update to the latest Edge release and monitor for anomalous browser activity.
Read briefing
Microsoft Edge (Chromium) – CVE-2026-95319 Use-After-Free in Printing
A use‑after‑free flaw in the Chromium printing engine (CVE‑2026‑95319) can allow local code execution on systems running Microsoft Edge. The issue is already fixed in the latest Chromium releases. Edge users should update immediately and consider disabling printing until a patch is applied.
Read briefing
Chromium CVE‑2026‑95325: Use‑After‑Free in ANGLE Affects Microsoft Edge
A use‑after‑free flaw in Chromium’s ANGLE graphics layer (CVE‑2026‑95325) can lead to arbitrary code execution in Microsoft Edge (Chromium‑based). The issue is fixed in the latest Edge releases. Defenders should verify their Edge version and apply the update immediately.
Read briefing
Microsoft Edge Addresses Chromium CVE-2026-95313 Use‑After‑Free in Fullscreen
A use‑after‑free flaw (CVE‑2026‑95313) was found in Chromium’s fullscreen handling. Microsoft Edge, built on Chromium, has incorporated the patch. Defenders should verify that Edge is updated to the latest release and monitor for any anomalous fullscreen activity.
Read briefing