Vulnerabilities
Microsoft Edge Addresses Chromium CVE‑2026‑110167 Use‑After‑Free Vulnerability
A use‑after‑free flaw (CVE‑2026‑110167) was found in Chromium. Microsoft Edge (Chromium‑based) has applied the fix. Defenders should verify Edge is updated to the latest release and monitor for anomalous activity.
What happened
The Chromium engine contains a use‑after‑free bug (CVE‑2026‑110167) that could allow an attacker to execute arbitrary code when rendering malicious web content.
Impact
Any system running a Chromium‑based browser that has not applied the latest patch is vulnerable. Microsoft Edge users are protected once the browser is updated to the current release.
What to do
- Confirm that Microsoft Edge is at the latest version (currently 125.0.6422.60 or newer).
- Force a patch deployment across all endpoints that use Edge.
- Enable automatic updates for all Chromium‑based browsers.
- Monitor browser logs for unusual memory access patterns or crashes that may indicate exploitation attempts.
- Apply the same update to any other Chromium‑based applications (e.g., Electron, VS Code) that embed the engine.
Related vulnerabilities
Microsoft Edge Addresses Chromium CVE-2026-106268 Use‑After‑Free Vulnerability
A use‑after‑free flaw (CVE‑2026‑106268) was found in Chromium. Microsoft Edge (Chromium‑based) has integrated the fix. Defenders should update Edge to the latest version and monitor for exploitation attempts.
Read briefing
Microsoft Edge Addresses Chromium CVE-2026-110142 Use‑After‑Free Vulnerability
A use‑after‑free flaw in Chromium (CVE‑2026‑110142) has been patched in Microsoft Edge. Defenders should verify that Edge is updated to the latest release and monitor for anomalous activity.
Read briefing
Microsoft Edge Addresses Chromium CVE-2026-106318 Use‑After‑Free Vulnerability
A use‑after‑free flaw in Chromium (CVE-2026-106318) can allow memory corruption and potential code execution. Microsoft Edge, built on Chromium, has incorporated the fix in its latest update. Defenders should ensure all Edge installations are updated and monitor for anomalous activity.
Read briefing
Microsoft Edge Addresses Chromium CVE‑2026‑106421 Use‑After‑Free Vulnerability
A use‑after‑free flaw (CVE‑2026‑106421) was found in Chromium, the engine that powers Microsoft Edge. The defect could enable arbitrary code execution, but Edge incorporates the Chromium fix and will deliver it via standard updates. Defenders should verify Edge is current and monitor for exploitation activity.
Read briefing