Vulnerabilities
Chromium CVE‑2026‑95352: DevTools Authorization Flaw Fixed in Edge
A recent CVE‑2026‑95352 flaw in Chromium’s DevTools allowed an attacker to bypass authorization checks and gain privileged access to debugging functions. Microsoft Edge (Chromium‑based) has incorporated the fix. Defenders should ensure browsers are updated and monitor DevTools usage.
What happened
A CVE‑2026‑95352 flaw in Chromium’s DevTools allowed an attacker to bypass authorization checks and gain privileged access to debugging features. The issue was identified by Google and assigned a CVE number.
Impact
Users of Chromium‑based browsers—including Microsoft Edge, Google Chrome, and others—could be exposed if the vulnerability is exploited. The flaw could enable attackers to inspect or modify page data, execute arbitrary scripts, or access sensitive information through the DevTools interface.
Mitigation
- Update Microsoft Edge and other Chromium‑based browsers to the latest stable release.
- Verify that the update includes the CVE‑2026‑95352 patch (check release notes for “DevTools authorization fix”).
- Disable or restrict DevTools access in production environments using group policies or browser extensions.
- Monitor browser logs for unusual DevTools activity and enforce least‑privilege policies.
Additional Notes
Microsoft Edge ingests Chromium updates, so the Edge patch automatically includes the DevTools authorization fix.
Related vulnerabilities
Microsoft Edge Mobile UI Misrepresentation – CVE-2026-95288
Microsoft Edge on mobile devices is affected by CVE-2026-95288, a Chromium-based UI misrepresentation flaw. The issue is fixed in newer Chromium builds; update Edge to the latest version to mitigate.
Read briefing
CVE-2026-95314: Incorrect Authorization in Chromium HID – Edge Users Must Update
A flaw in Chromium’s HID handling allows improper authorization, affecting all Chromium‑based browsers including Microsoft Edge. The issue is fixed in the latest Chromium releases, and Edge will receive the patch in its next update. Defenders should verify their browser versions and apply updates immediately.
Read briefing
Chromium CVE-2026-95344: Race Condition in DevTools Affects Microsoft Edge
A race condition in Chromium's DevTools (CVE‑2026‑95344) can allow attackers to exploit timing issues during debugging sessions. The flaw is present in all Chromium‑based browsers, including Microsoft Edge, until the latest update. Defenders should verify that Edge is updated to the most recent release and monitor for any abnormal DevTools activity.
Read briefing
Microsoft Edge Patch for CVE‑2026‑95375: BrowserTag Authorization Flaw
A Chromium BrowserTag authorization flaw (CVE‑2026‑95375) affects all Chromium‑based browsers. Microsoft Edge will receive the fix via its standard update channel. Defenders should update immediately and verify the patch.
Read briefing