Vulnerabilities
Chromium CVE‑2026‑95365: Type Confusion in IndexedDB Fixed in Edge
A type‑confusion flaw in Chromium’s IndexedDB (CVE‑2026‑95365) affects Microsoft Edge and other Chromium‑based browsers. Defenders should update to the latest Edge release or disable IndexedDB on untrusted sites to mitigate exploitation.
What happened
A type‑confusion flaw was discovered in Chromium’s IndexedDB implementation (CVE‑2026‑95365). The bug allows an attacker to manipulate the type of data stored in IndexedDB, potentially leading to memory corruption or arbitrary code execution.
Impact
All Chromium‑based browsers that ship the affected code are vulnerable, including Microsoft Edge. The flaw is exploitable only when the victim visits a malicious site that can trigger the type confusion.
Mitigation
- Update Microsoft Edge to the latest available version (Edge 120 or newer).
- Ensure other Chromium‑based browsers are also up to date.
- Consider disabling IndexedDB for high‑risk sites via group policy or extensions if immediate update is not possible.
Additional information
Microsoft incorporates the Chromium patch into its Edge releases; the vulnerability is fixed in the current stable channel.
Related vulnerabilities
Microsoft Edge Updates to Fix Chromium CVE-2026-106293 Type Confusion Vulnerability
A type‑confusion flaw in Chromium (CVE‑2026‑106293) has been patched in the latest Microsoft Edge releases. Defenders should verify that Edge is updated to the newest version and monitor for any anomalous activity that could indicate exploitation attempts.
Read briefing
Microsoft Edge (Chromium) Remote Code Execution via Type Confusion (CVE‑2026‑85898)
A type‑confusion flaw in Microsoft Edge (Chromium‑based) lets an unauthenticated network attacker execute arbitrary code. The vulnerability is exploitable through crafted URLs or network traffic. Defenders should update Edge to the latest patch, disable unsafe features, and monitor for anomalous process creation.
Read briefing
Microsoft Edge Mobile UI Misrepresentation – CVE-2026-95288
Microsoft Edge on mobile devices is affected by CVE-2026-95288, a Chromium-based UI misrepresentation flaw. The issue is fixed in newer Chromium builds; update Edge to the latest version to mitigate.
Read briefing
Microsoft Edge Patch for CVE‑2026‑95349: WebGL Buffer Overflow
A buffer overflow in WebGL was identified in Chromium, impacting all Chromium‑based browsers including Microsoft Edge. Microsoft has fixed the issue in the latest Edge release. Defenders should update Edge, verify the patch, and monitor for exploitation attempts.
Read briefing