Vulnerabilities
Microsoft Edge Addresses Chromium CVE-2026-106336 Vulnerability
A recent CVE‑2026‑106336 flaw in Chromium has been mitigated in Microsoft Edge (Chromium‑based). Edge users should apply the latest update to eliminate the risk. Defenders should verify patch status and monitor for exploitation attempts.
What happened
A flaw identified as CVE‑2026‑106336 in the Chromium engine introduced an observable discrepancy that could be leveraged by attackers. The issue was assigned and documented by Google Chrome developers.
Impact
Microsoft Edge (Chromium‑based) incorporates the affected Chromium code. Users running unpatched versions are potentially exposed to exploitation that could lead to information disclosure or other unintended behavior.
Mitigation
Microsoft has integrated the Chromium fix into the next Edge release. The vulnerability is resolved by updating the browser to the latest version.
What to do
- Verify that Edge is updated to the most recent release.
- Force a forced update across managed endpoints via your MDM or SCCM.
- Monitor browser logs for anomalous activity related to the CVE identifier.
- Apply any additional security baselines that restrict script execution or reduce attack surface.
Related vulnerabilities
Microsoft Edge Addresses Chromium CVE-2026-106311 Clickjacking Vulnerability
Microsoft Edge has patched a clickjacking vulnerability (CVE-2026-106311) inherited from Chromium. The fix is included in the latest Edge releases. Defenders should update Edge and verify that clickjacking protections are active.
Read briefing
Microsoft Edge Addresses Chromium CVE-2026-106195: Incorrect Authorization Vulnerability
A Chromium bug (CVE-2026-106195) that allowed improper authorization was patched in the latest Chromium releases. Microsoft Edge (Chromium-based) automatically inherits this fix. Defenders should confirm Edge is updated to the newest version and monitor for related alerts.
Read briefing
Microsoft Edge Addresses Chromium CVE-2026-106331 Input Validation Vulnerability
A recent Chromium bug (CVE‑2026‑106331) that allowed improper input validation has been fixed in Microsoft Edge. Edge users should confirm they are on the latest release to avoid exploitation. The patch is part of the current Chromium-based Edge update.
Read briefing
Microsoft Edge Addresses Chromium Type Confusion CVE-2026-110140
A type‑confusion flaw (CVE‑2026‑110140) was discovered in Chromium. Microsoft Edge (Chromium‑based) incorporates the Chromium engine, so the fix is delivered through regular Edge updates. Defenders should verify Edge is updated to the latest version to eliminate the risk.
Read briefing