Vulnerabilities
Microsoft Edge Addresses Chromium CVE-2026-106318 Use‑After‑Free Vulnerability
A use‑after‑free flaw in Chromium (CVE-2026-106318) can allow memory corruption and potential code execution. Microsoft Edge, built on Chromium, has incorporated the fix in its latest update. Defenders should ensure all Edge installations are updated and monitor for anomalous activity.
What Happened
A use‑after‑free vulnerability (CVE‑2026‑106318) was discovered in Chromium’s rendering engine. The flaw occurs when a freed memory reference is accessed, potentially allowing an attacker to execute arbitrary code.
Impact
Exploit could lead to memory corruption, privilege escalation, or remote code execution on systems running affected browsers. The issue is limited to the rendering component and does not affect Windows core components directly.
What to Do
Defenders should:
- Verify that Microsoft Edge is updated to the latest version (currently 120.x or newer).
- Ensure Windows Update is enabled and that all pending updates are installed.
- Monitor for suspicious browser activity or anomalous memory usage.
- Apply any vendor‑issued mitigations or configuration changes if available.
Related vulnerabilities
Microsoft Edge Addresses Chromium CVE-2026-106268 Use‑After‑Free Vulnerability
A use‑after‑free flaw (CVE‑2026‑106268) was found in Chromium. Microsoft Edge (Chromium‑based) has integrated the fix. Defenders should update Edge to the latest version and monitor for exploitation attempts.
Read briefing
Microsoft Edge Addresses Chromium CVE‑2026‑110167 Use‑After‑Free Vulnerability
A use‑after‑free flaw (CVE‑2026‑110167) was found in Chromium. Microsoft Edge (Chromium‑based) has applied the fix. Defenders should verify Edge is updated to the latest release and monitor for anomalous activity.
Read briefing
Microsoft Edge Addresses Chromium CVE-2026-110142 Use‑After‑Free Vulnerability
A use‑after‑free flaw in Chromium (CVE‑2026‑110142) has been patched in Microsoft Edge. Defenders should verify that Edge is updated to the latest release and monitor for anomalous activity.
Read briefing
Microsoft Edge Addresses Chromium CVE‑2026‑106421 Use‑After‑Free Vulnerability
A use‑after‑free flaw (CVE‑2026‑106421) was found in Chromium, the engine that powers Microsoft Edge. The defect could enable arbitrary code execution, but Edge incorporates the Chromium fix and will deliver it via standard updates. Defenders should verify Edge is current and monitor for exploitation activity.
Read briefing