Vulnerabilities
CVE-2026-96198: Heap Overflow in Microsoft Edge (Chromium) Enables Remote Code Execution
A heap-based buffer overflow in Microsoft Edge (Chromium-based) allows attackers to execute arbitrary code remotely. The flaw can be triggered over a network without user interaction. Defenders should apply the latest security update, verify Edge version, and monitor for suspicious activity.
What happened
A heap-based buffer overflow in Microsoft Edge (Chromium-based) permits an attacker to execute arbitrary code remotely. The flaw is triggered by crafted network traffic and does not require user interaction.
Impact
Any machine running an affected Edge version is vulnerable to remote code execution. The vulnerability could allow privilege escalation and full system compromise.
Mitigation
- Apply the latest Microsoft Edge update (version X.Y.Z or later).
- Verify that the Edge version on all endpoints meets the minimum patched version.
- Configure Windows Update to automatically install security patches.
- Consider disabling Edge or restricting its network access as a temporary measure.
Detection
Monitor for unusual outbound connections from Edge and for process creation events that match known exploit patterns. Review Windows Event logs for Event ID 4688 with suspicious command lines.
Related vulnerabilities
Chromium CVE-2026-95350: Buffer Overflow in ANGLE Affects Edge
A buffer overflow in ANGLE within Chromium (CVE-2026-95350) can allow remote code execution when rendering malicious content. Microsoft Edge, built on Chromium, inherits this flaw. Defenders should update to the latest Edge release or apply vendor patches immediately.
Read briefing
CVE-2026-102856: Visio RCE via Heap Overflow
A heap-based buffer overflow vulnerability exists in Microsoft Visio. Successful exploitation allows a remote, unauthenticated attacker to achieve arbitrary code execution. Defenders should prioritize patching Visio installations.
Read briefing
Chromium CVE-2026-95324: Uninitialized GPU Resource Vulnerability
A flaw in Chromium’s GPU handling allows an attacker to exploit an uninitialized resource, potentially leading to memory corruption or arbitrary code execution. Microsoft Edge, built on Chromium, incorporates the same fix, so updating to the latest Edge version mitigates the risk. Defenders should verify Edge is current and monitor GPU activity for anomalies.
Read briefing
Microsoft Office Access Remote Code Execution Vulnerability (CVE-2026-102849)
A heap-based buffer overflow in Microsoft Office Access (CVE-2026-102849) permits remote code execution by an unauthenticated attacker. All versions of Office Access are vulnerable until Microsoft releases a patch. Defenders should apply the update immediately, restrict network access to Office files, and monitor for exploitation attempts.
Read briefing