Vulnerabilities
Chromium CVE-2026-95364: Improper Password Input Validation Fixed in Edge
A flaw in Chromium’s password handling allowed improper input validation, potentially exposing credentials. Microsoft Edge (Chromium‑based) incorporates the fix. Defenders should verify Edge is updated to the latest version and monitor for credential leakage.
What happened
A vulnerability (CVE-2026-95364) was discovered in Chromium’s password subsystem, where input validation was insufficient, potentially allowing malformed data to bypass checks.
Impact
Any Chromium-based browser that had not applied the patch could be susceptible to credential exposure. Microsoft Edge users are affected until the latest update is installed.
What to do
Confirm that Edge is running a version that includes the Chromium fix. If not, update immediately. After updating, review any logs for anomalous password handling and consider tightening password policies.
- Check Edge version: edge://settings/help
- Apply the latest Windows Update or download the latest Edge installer.
- Audit password storage and transmission logs for irregularities.
Microsoft Edge incorporates the Chromium patch, ensuring the issue is resolved in current releases.
Related vulnerabilities
Microsoft Edge Vulnerability CVE-2026-95370: NFC Implementation Flaw
A flaw in Chromium’s NFC handling (CVE‑2026‑95370) can allow attackers to exploit improper data validation. Microsoft Edge, built on Chromium, inherits the issue. Defenders should verify Edge is updated to the latest release and consider disabling NFC features if not required.
Read briefing
CVE-2026-95314: Incorrect Authorization in Chromium HID – Edge Users Must Update
A flaw in Chromium’s HID handling allows improper authorization, affecting all Chromium‑based browsers including Microsoft Edge. The issue is fixed in the latest Chromium releases, and Edge will receive the patch in its next update. Defenders should verify their browser versions and apply updates immediately.
Read briefing
Microsoft Edge Mobile UI Misrepresentation – CVE-2026-95288
Microsoft Edge on mobile devices is affected by CVE-2026-95288, a Chromium-based UI misrepresentation flaw. The issue is fixed in newer Chromium builds; update Edge to the latest version to mitigate.
Read briefing
Microsoft Edge Patch for CVE‑2026‑95349: WebGL Buffer Overflow
A buffer overflow in WebGL was identified in Chromium, impacting all Chromium‑based browsers including Microsoft Edge. Microsoft has fixed the issue in the latest Edge release. Defenders should update Edge, verify the patch, and monitor for exploitation attempts.
Read briefing