Vulnerabilities
Microsoft Edge Addresses Chromium CVE-2026-95313 Use‑After‑Free in Fullscreen
A use‑after‑free flaw (CVE‑2026‑95313) was found in Chromium’s fullscreen handling. Microsoft Edge, built on Chromium, has incorporated the patch. Defenders should verify that Edge is updated to the latest release and monitor for any anomalous fullscreen activity.
What Happened
A use‑after‑free vulnerability was identified in Chromium’s fullscreen implementation (CVE‑2026‑95313). The flaw could allow an attacker to trigger a memory corruption when a page exits fullscreen mode.
Affected Products
- Microsoft Edge (Chromium‑based) – all versions that include the affected Chromium code.
- Other Chromium‑based browsers that have not yet applied the patch.
Impact
Exploitation could lead to arbitrary code execution or denial of service within the browser context. The vulnerability is limited to the browser process and does not provide direct system‑level privileges.
Mitigation Steps
- Update Microsoft Edge to the latest version (check the release notes for the patch).
- Apply the same update to any other Chromium‑based browsers in use.
- Enable browser security features such as sandboxing and content security policy to reduce attack surface.
- Monitor logs for unusual fullscreen transitions or crashes.
Microsoft Edge has already incorporated the Chromium patch; ensure your deployment is up‑to‑date.
Related vulnerabilities
Microsoft Edge (Chromium) – CVE-2026-95319 Use-After-Free in Printing
A use‑after‑free flaw in the Chromium printing engine (CVE‑2026‑95319) can allow local code execution on systems running Microsoft Edge. The issue is already fixed in the latest Chromium releases. Edge users should update immediately and consider disabling printing until a patch is applied.
Read briefing
Chromium CVE‑2026‑95325: Use‑After‑Free in ANGLE Affects Microsoft Edge
A use‑after‑free flaw in Chromium’s ANGLE graphics layer (CVE‑2026‑95325) can lead to arbitrary code execution in Microsoft Edge (Chromium‑based). The issue is fixed in the latest Edge releases. Defenders should verify their Edge version and apply the update immediately.
Read briefing
Chromium CVE-2026-87455: Use‑after‑free in Aura Affects Microsoft Edge
A use‑after‑free flaw in Chromium’s Aura layer (CVE‑2026‑87455) can allow arbitrary code execution. Microsoft Edge, built on Chromium, inherits the issue and is fixed in the latest releases. Defenders should update Edge and monitor for patches.
Read briefing
Chromium CVE‑2026‑95356: Use‑After‑Free in WindowDialog
A use‑after‑free flaw in Chromium’s WindowDialog component (CVE‑2026‑95356) can enable arbitrary code execution via malicious web content. Microsoft Edge, which incorporates Chromium, is affected until the patch is applied. Defenders should update to the latest Edge release and monitor for anomalous browser activity.
Read briefing