Vulnerabilities
Chromium CVE‑2026‑95357: GPU Out‑of‑Bounds Write Fixed in Latest Edge Release
A recent Chromium vulnerability (CVE‑2026‑95357) allowed an out‑of‑bounds write in the GPU driver, potentially enabling arbitrary code execution. Microsoft Edge (Chromium‑based) now includes the fix. Defenders should verify that Edge and Chrome are updated to the latest patch and monitor for anomalous GPU activity.
What Happened
Chromium’s GPU subsystem suffered an out‑of‑bounds write that could corrupt memory and lead to arbitrary code execution. The flaw was identified by the Chrome team and assigned CVE‑2026‑95357.
Who Is Affected
All Chromium‑based browsers, including Google Chrome, Microsoft Edge, and other derivatives that incorporate the same GPU code path, are impacted until they receive the patch.
Impact
Memory corruption in the GPU driver could allow a malicious web page or local application to execute code with elevated privileges, potentially compromising the host system.
What to Do
- Confirm that Edge and Chrome are at the latest stable release (the fix is included in the most recent Chromium update).
- Force an update if automatic updates are disabled.
- Monitor system logs for unusual GPU activity or crashes.
- Apply any vendor‑specific mitigations if your environment uses custom GPU drivers.
Microsoft Edge inherits the Chromium patch through its standard update channel, so no additional action is required beyond keeping the browser current.
Related vulnerabilities
Microsoft Edge WebGL Out-of-Bounds Write (CVE-2026-95329) – Immediate Update Required
A memory corruption flaw in Edge’s WebGL implementation allows an attacker to trigger an out‑of‑bounds write, potentially leading to arbitrary code execution. The issue is fixed in the latest Chromium‑based Edge releases. Defenders should update Edge immediately and verify the patch.
Read briefing
Microsoft Edge Patch for CVE‑2026‑95349: WebGL Buffer Overflow
A buffer overflow in WebGL was identified in Chromium, impacting all Chromium‑based browsers including Microsoft Edge. Microsoft has fixed the issue in the latest Edge release. Defenders should update Edge, verify the patch, and monitor for exploitation attempts.
Read briefing
Chromium CVE-2026-95324: Uninitialized GPU Resource Vulnerability
A flaw in Chromium’s GPU handling allows an attacker to exploit an uninitialized resource, potentially leading to memory corruption or arbitrary code execution. Microsoft Edge, built on Chromium, incorporates the same fix, so updating to the latest Edge version mitigates the risk. Defenders should verify Edge is current and monitor GPU activity for anomalies.
Read briefing
Microsoft Edge Mobile UI Misrepresentation – CVE-2026-95288
Microsoft Edge on mobile devices is affected by CVE-2026-95288, a Chromium-based UI misrepresentation flaw. The issue is fixed in newer Chromium builds; update Edge to the latest version to mitigate.
Read briefing