Vulnerabilities
Microsoft Edge Addresses Chromium CVE-2026-106297: Incorrect Authorization
A Chromium bug (CVE-2026-106297) permits incorrect authorization handling, potentially allowing malicious sites or extensions to gain elevated privileges. Microsoft Edge (Chromium-based) incorporates the upstream fix. Defenders should ensure Edge is updated and monitor for anomalous access attempts.
What happened
A Chromium bug (CVE-2026-106297) was discovered that permits incorrect authorization handling within the browser. The flaw could allow a malicious site or extension to gain elevated privileges.
Impact
Microsoft Edge, being Chromium-based, inherits the same vulnerability until the upstream fix is applied. Users running older Edge builds may be exposed to unauthorized access to browser resources.
What to do
Defenders should:
- Verify that Microsoft Edge is updated to the latest version; the fix is included in recent releases.
- Monitor browser logs for anomalous privilege escalation attempts.
- Enforce policy to block untrusted extensions and restrict site permissions.
Related vulnerabilities
Microsoft Edge Addresses Chromium Safe Browsing Authorization Flaw (CVE-2026-95292)
A recent Chromium vulnerability (CVE-2026-95292) exposed incorrect authorization handling in Safe Browsing. Microsoft Edge, built on Chromium, has incorporated the fix. Update Edge to mitigate the risk.
Read briefing
CVE-2026-95358: Incorrect Authorization in Chromium Mobile – Edge and Chrome Update Required
A new CVE, CVE-2026-95358, exposes an incorrect authorization flaw in Chromium’s mobile implementation. The issue is present in all Chromium‑based browsers, including Microsoft Edge, and is fixed in the latest stable releases. Defenders should verify that Edge and Chrome are updated to the patched versions and monitor for any related exploitation activity.
Read briefing
Microsoft Edge Patch for CVE‑2026‑95375: BrowserTag Authorization Flaw
A Chromium BrowserTag authorization flaw (CVE‑2026‑95375) affects all Chromium‑based browsers. Microsoft Edge will receive the fix via its standard update channel. Defenders should update immediately and verify the patch.
Read briefing
CVE-2026-95314: Incorrect Authorization in Chromium HID – Edge Users Must Update
A flaw in Chromium’s HID handling allows improper authorization, affecting all Chromium‑based browsers including Microsoft Edge. The issue is fixed in the latest Chromium releases, and Edge will receive the patch in its next update. Defenders should verify their browser versions and apply updates immediately.
Read briefing