Vulnerabilities
Chromium CVE-2026-95327: Information Leak in Networking
A flaw in Chromium’s networking stack allows sensitive data leakage. Microsoft Edge (Chromium‑based) is affected. Defenders should update to the latest Edge release to mitigate the risk.
What happened
A flaw in Chromium’s networking stack allows an attacker to read sensitive data that should be isolated. The issue is identified as CVE-2026-95327.
Impact
Microsoft Edge (Chromium‑based) incorporates the affected Chromium code, so any user running an unpatched version could inadvertently expose internal network traffic or credentials. The vulnerability does not provide direct code execution but can leak private data.
Mitigation
Defenders should ensure Edge is updated to the latest release that includes the Chromium patch. If immediate update is not possible, consider disabling the affected networking features or applying group policy to enforce automatic updates.
- Check current Edge version.
- Force update via Windows Update or Microsoft Edge update channel.
- Verify that the patch is present by reviewing the release notes.
Google Chrome releases note: This update addresses CVE-2026-95327.
Related vulnerabilities
Chromium CVE-2026-95336: Information Leak in Transactions Platform
A new CVE‑2026‑95336 in Chromium’s Transactions Platform can leak sensitive data. The flaw affects Chrome and all Chromium‑based browsers, including Microsoft Edge. Defenders should apply the latest browser updates and verify the patch is in place.
Read briefing
Microsoft Edge Mobile UI Misrepresentation – CVE-2026-95288
Microsoft Edge on mobile devices is affected by CVE-2026-95288, a Chromium-based UI misrepresentation flaw. The issue is fixed in newer Chromium builds; update Edge to the latest version to mitigate.
Read briefing
OpenSSL and WolfSSL Patch High‑Severity DTLS Vulnerabilities (CVE‑2026‑84782, CVE‑2026‑84783)
OpenSSL and WolfSSL released updates fixing a dozen critical bugs, including CVE‑2026‑84782 that lets unauthenticated attackers leak heap fragments or crash DTLS sessions. The flaw can be triggered during a DTLS handshake and is exploitable over the network without credentials. Defenders should upgrade to the latest releases and verify DTLS configurations.
Read briefing
Chromium CVE-2026-95312: Password Information Leak in Edge
A flaw in Chromium’s password handling can leak credentials. Microsoft Edge users are affected and should update immediately. Defenders should verify patch status and monitor for exposed data.
Read briefing