Vulnerabilities
Chromium CVE‑2026‑95356: Use‑After‑Free in WindowDialog
A use‑after‑free flaw in Chromium’s WindowDialog component (CVE‑2026‑95356) can enable arbitrary code execution via malicious web content. Microsoft Edge, which incorporates Chromium, is affected until the patch is applied. Defenders should update to the latest Edge release and monitor for anomalous browser activity.
What happened
A use‑after‑free flaw was discovered in Chromium’s WindowDialog component (CVE‑2026‑95356). The defect can allow an attacker to trigger arbitrary code execution when a malicious web page interacts with the dialog.
Impact
All Chromium‑based browsers—including Microsoft Edge—are affected until the patch is applied. The vulnerability could be leveraged to run code with the privileges of the user’s browser process.
What to do
Update Microsoft Edge to the latest release; the Chromium base already contains the fix. Verify that the browser version is 120 or newer. After updating, monitor for any anomalous activity in browser logs.
Related vulnerabilities
Microsoft Edge (Chromium) – CVE-2026-95319 Use-After-Free in Printing
A use‑after‑free flaw in the Chromium printing engine (CVE‑2026‑95319) can allow local code execution on systems running Microsoft Edge. The issue is already fixed in the latest Chromium releases. Edge users should update immediately and consider disabling printing until a patch is applied.
Read briefing
Chromium CVE-2026-87455: Use‑after‑free in Aura Affects Microsoft Edge
A use‑after‑free flaw in Chromium’s Aura layer (CVE‑2026‑87455) can allow arbitrary code execution. Microsoft Edge, built on Chromium, inherits the issue and is fixed in the latest releases. Defenders should update Edge and monitor for patches.
Read briefing
Microsoft Edge Addresses Chromium CVE-2026-95313 Use‑After‑Free in Fullscreen
A use‑after‑free flaw (CVE‑2026‑95313) was found in Chromium’s fullscreen handling. Microsoft Edge, built on Chromium, has incorporated the patch. Defenders should verify that Edge is updated to the latest release and monitor for any anomalous fullscreen activity.
Read briefing
Chromium CVE‑2026‑95325: Use‑After‑Free in ANGLE Affects Microsoft Edge
A use‑after‑free flaw in Chromium’s ANGLE graphics layer (CVE‑2026‑95325) can lead to arbitrary code execution in Microsoft Edge (Chromium‑based). The issue is fixed in the latest Edge releases. Defenders should verify their Edge version and apply the update immediately.
Read briefing