Vulnerabilities
Chromium CVE-2026-95312: Password Information Leak in Edge
A flaw in Chromium’s password handling can leak credentials. Microsoft Edge users are affected and should update immediately. Defenders should verify patch status and monitor for exposed data.
What happened
A vulnerability in Chromium’s password storage logic allows an attacker to read stored credentials, potentially exposing user passwords. The flaw is identified as CVE‑2026‑95312.
Who is affected
All Chromium‑based browsers, including Microsoft Edge, are impacted. Edge users on versions that have not yet integrated the Chromium patch are at risk.
Impact
Credentials stored in the browser can be read by malicious code with sufficient privileges, leading to credential compromise and potential lateral movement.
What to do
- Ensure Microsoft Edge is updated to the latest release that includes the Chromium patch.
- Verify that the browser’s password manager is functioning correctly after the update.
- Monitor logs for unusual credential access attempts and investigate any anomalies.
- Consider disabling or limiting the use of the browser’s built‑in password manager if it is not required.
Related vulnerabilities
Chromium CVE-2026-95364: Improper Password Input Validation Fixed in Edge
A flaw in Chromium’s password handling allowed improper input validation, potentially exposing credentials. Microsoft Edge (Chromium‑based) incorporates the fix. Defenders should verify Edge is updated to the latest version and monitor for credential leakage.
Read briefing
Chromium CVE-2026-95336: Information Leak in Transactions Platform
A new CVE‑2026‑95336 in Chromium’s Transactions Platform can leak sensitive data. The flaw affects Chrome and all Chromium‑based browsers, including Microsoft Edge. Defenders should apply the latest browser updates and verify the patch is in place.
Read briefing
Microsoft Edge Mobile UI Misrepresentation – CVE-2026-95288
Microsoft Edge on mobile devices is affected by CVE-2026-95288, a Chromium-based UI misrepresentation flaw. The issue is fixed in newer Chromium builds; update Edge to the latest version to mitigate.
Read briefing
Chromium CVE-2026-95327: Information Leak in Networking
A flaw in Chromium’s networking stack allows sensitive data leakage. Microsoft Edge (Chromium‑based) is affected. Defenders should update to the latest Edge release to mitigate the risk.
Read briefing