Vulnerabilities
Chromium CVE‑2026‑95325: Use‑After‑Free in ANGLE Affects Microsoft Edge
A use‑after‑free flaw in Chromium’s ANGLE graphics layer (CVE‑2026‑95325) can lead to arbitrary code execution in Microsoft Edge (Chromium‑based). The issue is fixed in the latest Edge releases. Defenders should verify their Edge version and apply the update immediately.
What happened
A use‑after‑free bug was discovered in the ANGLE graphics library that underlies Chromium’s GPU acceleration. The flaw can be triggered by crafted web content and may allow an attacker to execute arbitrary code in the context of the browser.
Impact
All Chromium‑based browsers, including Microsoft Edge, are vulnerable until the latest patch is applied. The vulnerability carries a high severity rating and could be exploited remotely without user interaction.
Mitigation
- Microsoft Edge: Update to the latest version (Edge 125+). The patch is included in the current cumulative update.
- Google Chrome: Update to the latest release; the same fix is back‑ported.
- Other Chromium‑based browsers: Apply the vendor’s latest security update.
What to do
Check the browser version on all endpoints. If you are running a version older than the latest release, schedule an update. Monitor for anomalous memory accesses or crashes in browser processes. Consider disabling GPU acceleration in environments where the risk cannot be mitigated immediately.
Related vulnerabilities
Chromium CVE‑2026‑95356: Use‑After‑Free in WindowDialog
A use‑after‑free flaw in Chromium’s WindowDialog component (CVE‑2026‑95356) can enable arbitrary code execution via malicious web content. Microsoft Edge, which incorporates Chromium, is affected until the patch is applied. Defenders should update to the latest Edge release and monitor for anomalous browser activity.
Read briefing
Microsoft Edge (Chromium) – CVE-2026-95319 Use-After-Free in Printing
A use‑after‑free flaw in the Chromium printing engine (CVE‑2026‑95319) can allow local code execution on systems running Microsoft Edge. The issue is already fixed in the latest Chromium releases. Edge users should update immediately and consider disabling printing until a patch is applied.
Read briefing
Chromium Bluetooth Use-After-Free CVE-2026-95348 – Edge Update Required
A use‑after‑free flaw in Chromium’s Bluetooth stack (CVE-2026-95348) can lead to arbitrary code execution. Microsoft Edge, which incorporates Chromium, is affected. Defenders should verify they are running the latest Edge build and apply any pending updates.
Read briefing
Chromium CVE-2026-87455: Use‑after‑free in Aura Affects Microsoft Edge
A use‑after‑free flaw in Chromium’s Aura layer (CVE‑2026‑87455) can allow arbitrary code execution. Microsoft Edge, built on Chromium, inherits the issue and is fixed in the latest releases. Defenders should update Edge and monitor for patches.
Read briefing