Vulnerabilities
Chromium CVE-2026-95350: Buffer Overflow in ANGLE Affects Edge
A buffer overflow in ANGLE within Chromium (CVE-2026-95350) can allow remote code execution when rendering malicious content. Microsoft Edge, built on Chromium, inherits this flaw. Defenders should update to the latest Edge release or apply vendor patches immediately.
Microsoft Edge, built on Chromium, inherits a buffer overflow vulnerability in the ANGLE graphics layer (CVE-2026-95350). The flaw can be triggered by crafted web content and may lead to arbitrary code execution.
What happened
A buffer overflow was discovered in the ANGLE component of Chromium, which is used by Microsoft Edge to translate OpenGL ES calls to Direct3D. The issue allows an attacker to overflow a buffer during rendering of maliciously crafted pages.
Impact
- All Chromium‑based browsers, including Microsoft Edge, are potentially vulnerable until patched.
- Remote code execution could occur on the victim’s machine if the user visits a malicious site.
Mitigation
- Upgrade Microsoft Edge to the latest version (currently 125.x or newer).
- Enable automatic browser updates to receive the patch as soon as it is released.
- Consider disabling ANGLE via policy if a temporary workaround is required (not a long‑term fix).
Vendor guidance
Microsoft recommends updating to the latest Edge release to mitigate the CVE-2026-95350 vulnerability.
Related vulnerabilities
Chromium CVE-2026-95284: Buffer Overflow in ANGLE Affects Microsoft Edge
A buffer overflow in Chromium’s ANGLE component (CVE-2026-95284) can lead to memory corruption. Microsoft Edge (Chromium‑based) inherits the flaw and is vulnerable until patched. Defenders should update Edge to the latest release and monitor for exploitation activity.
Read briefing
Microsoft Edge Patch for CVE‑2026‑95349: WebGL Buffer Overflow
A buffer overflow in WebGL was identified in Chromium, impacting all Chromium‑based browsers including Microsoft Edge. Microsoft has fixed the issue in the latest Edge release. Defenders should update Edge, verify the patch, and monitor for exploitation attempts.
Read briefing
Chromium CVE‑2026‑95325: Use‑After‑Free in ANGLE Affects Microsoft Edge
A use‑after‑free flaw in Chromium’s ANGLE graphics layer (CVE‑2026‑95325) can lead to arbitrary code execution in Microsoft Edge (Chromium‑based). The issue is fixed in the latest Edge releases. Defenders should verify their Edge version and apply the update immediately.
Read briefing
Microsoft Edge Patch for CVE‑2026‑95375: BrowserTag Authorization Flaw
A Chromium BrowserTag authorization flaw (CVE‑2026‑95375) affects all Chromium‑based browsers. Microsoft Edge will receive the fix via its standard update channel. Defenders should update immediately and verify the patch.
Read briefing