Vulnerabilities
Microsoft Edge Addresses Chromium CVE‑2026‑106390: Incorrect Provision of Functionality
A Chrome‑assigned CVE‑2026‑106390 flaw in Chromium’s handling of specified functionality has been fixed in the latest Microsoft Edge (Chromium‑based) releases. Defenders should verify Edge is updated to the latest version and monitor for further advisories.
What Happened
Chromium’s handling of specified functionality triggered CVE‑2026‑106390, a flaw that could allow an attacker to exploit incorrect provision of features. The vulnerability was identified and assigned by Google Chrome’s security team.
Affected Systems
All Chromium‑based browsers that had not yet applied the latest security patch, including Microsoft Edge (Chromium‑based) versions prior to the most recent update.
Mitigation Steps
- Verify that Microsoft Edge is running the latest version (check via Settings > About Microsoft Edge).
- Force an update if the browser is out of date; the patch is included in the current release cycle.
- Apply the same update to any other Chromium‑based browsers in use.
Monitoring
Keep an eye on Microsoft Security Response Center advisories and the Chromium release blog for any additional patches or related CVEs.
Related vulnerabilities
Microsoft Edge Addresses Chromium CVE-2026-106389: Incorrect Authorization
A recent CVE-2026-106389 flaw in Chromium allows incorrect authorization. Microsoft Edge (Chromium-based) will incorporate the fix in upcoming releases. Defenders should verify Edge version and apply updates promptly.
Read briefing
Microsoft Edge Addresses Chromium CVE-2026-106297: Incorrect Authorization
A Chromium bug (CVE-2026-106297) permits incorrect authorization handling, potentially allowing malicious sites or extensions to gain elevated privileges. Microsoft Edge (Chromium-based) incorporates the upstream fix. Defenders should ensure Edge is updated and monitor for anomalous access attempts.
Read briefing
Microsoft Edge Addresses Chromium CVE-2026-106195: Incorrect Authorization Vulnerability
A Chromium bug (CVE-2026-106195) that allowed improper authorization was patched in the latest Chromium releases. Microsoft Edge (Chromium-based) automatically inherits this fix. Defenders should confirm Edge is updated to the newest version and monitor for related alerts.
Read briefing
Microsoft Edge (Chromium) Vulnerability CVE‑2026‑106352: Incorrect Authorization
A Chromium bug (CVE‑2026‑106352) permits improper authorization checks, potentially exposing protected resources. Microsoft Edge inherits the flaw via its Chromium base. Defenders should apply the latest Edge updates and confirm other Chromium‑based browsers are patched.
Read briefing