Vulnerabilities
CVE-2026-106381: Incorrect Authorization in Chromium – Edge Updated
Microsoft Edge (Chromium-based) has incorporated a fix for CVE-2026-106381, an incorrect authorization flaw discovered in Chromium. The patch is included in the latest Edge release. Defenders should verify that Edge and other Chromium-based browsers are updated to the latest version and monitor for any related exploitation attempts.
What Happened
Chrome identified an incorrect authorization bug in Chromium, assigned CVE-2026-106381. The flaw could allow an attacker to bypass access controls within the browser engine.
Impact
Microsoft Edge (Chromium-based) incorporates the patched Chromium code, so the vulnerability is resolved in the latest Edge releases. Other Chromium-based browsers may also be affected until they apply the same patch.
What to Do
- Verify that Edge is running the latest version (check Settings → About Microsoft Edge).
- Ensure all other Chromium-based browsers (e.g., Brave, Vivaldi) are updated to the newest release.
- Apply any pending Windows updates that include the Chromium patch.
- Monitor security logs for anomalous browser activity that could indicate exploitation attempts.
Additional Guidance
Microsoft recommends keeping browsers up-to-date and enabling automatic updates to receive security fixes promptly.
Related vulnerabilities
Microsoft Edge Addresses Chromium CVE-2026-106195: Incorrect Authorization Vulnerability
A Chromium bug (CVE-2026-106195) that allowed improper authorization was patched in the latest Chromium releases. Microsoft Edge (Chromium-based) automatically inherits this fix. Defenders should confirm Edge is updated to the newest version and monitor for related alerts.
Read briefing
Microsoft Edge Addresses Chromium CVE-2026-106297: Incorrect Authorization
A Chromium bug (CVE-2026-106297) permits incorrect authorization handling, potentially allowing malicious sites or extensions to gain elevated privileges. Microsoft Edge (Chromium-based) incorporates the upstream fix. Defenders should ensure Edge is updated and monitor for anomalous access attempts.
Read briefing
Microsoft Edge Vulnerability CVE-2026-106306: Incorrect Authorization in Chromium
A flaw in Chromium’s authorization logic, assigned CVE‑2026‑106306, can allow unauthorized actions when Microsoft Edge (Chromium‑based) processes certain requests. The issue is fixed in the latest Chromium releases, which Edge incorporates. Defenders should verify Edge is updated to the latest patch and monitor for anomalous access patterns.
Read briefing
Microsoft Edge Addresses Chromium CVE-2026-106389: Incorrect Authorization
A recent CVE-2026-106389 flaw in Chromium allows incorrect authorization. Microsoft Edge (Chromium-based) will incorporate the fix in upcoming releases. Defenders should verify Edge version and apply updates promptly.
Read briefing