Chromium Use-After-Free CVE-2026-106357 Fixed in Latest Microsoft Edge

What happened

A use‑after‑free flaw (CVE‑2026‑106357) was identified in the Chromium rendering engine. The bug could allow an attacker to trigger arbitrary code execution by manipulating memory after it has been freed.

Who is affected

All browsers that ship the affected Chromium version, including Microsoft Edge (Chromium‑based) and other Chromium‑derived browsers, are potentially vulnerable until the patch is applied.

Defender actions

• Confirm that Microsoft Edge is updated to the latest version (Edge 130+).
• Verify that the Chromium component has received the patch by checking the build number or release notes.
• Deploy the update through your usual patch management workflow.
• Monitor endpoint logs for anomalous memory access or exploitation attempts.

Mitigation overview

The fix is a code change in Chromium that removes the unsafe memory reference. No additional configuration is required beyond installing the updated browser.

Monitoring guidance

Keep an eye on threat intelligence feeds for any active exploitation campaigns targeting CVE‑2026‑106357. If you detect suspicious activity, investigate and isolate the affected systems immediately.