CVE-2026-95314: Incorrect Authorization in Chromium HID – Edge Users Must Update

What Happened

A vulnerability (CVE‑2026‑95314) was discovered in Chromium’s handling of Human Interface Devices. The flaw permits an attacker to bypass authorization checks and potentially gain unauthorized access to device input streams.

Impact

All Chromium‑based browsers, including Microsoft Edge, are affected until the next Chromium update is deployed. The vulnerability could enable attackers to read or inject input from HID devices without user consent.

Mitigation

• Verify that your Chromium or Edge installation is at least the latest stable release.
• Apply any pending security updates for your operating system that include the updated browser package.
• For environments that cannot update immediately, consider disabling HID device access in browser policy or using a network firewall to block traffic to the affected components.

Next Steps

Monitor Microsoft’s security advisory feed for the exact release date of the Edge patch. Verify the version number on your systems and schedule an update rollout. Keep an eye on the Chromium release notes for any additional mitigations or workarounds.