Advisories
Microsoft Edge Addresses Chromium Safe Browsing Authorization Flaw (CVE-2026-95292)
A recent Chromium vulnerability (CVE-2026-95292) exposed incorrect authorization handling in Safe Browsing. Microsoft Edge, built on Chromium, has incorporated the fix. Update Edge to mitigate the risk.
Microsoft Edge, built on Chromium, has incorporated a fix for a recent Safe Browsing flaw that allowed improper authorization checks. The issue, identified as CVE-2026-95292, could have enabled attackers to bypass Safe Browsing controls.
What happened
The vulnerability existed in Chromium’s Safe Browsing component, where authorization logic was incorrectly implemented. An attacker could potentially gain unauthorized access to protected browsing data.
Impact
Systems running Microsoft Edge before the latest update may have been exposed to this flaw. The risk is limited to browsers that have not applied the Chromium patch.
What to do
- Verify that Edge is updated to the latest version (check the version number in Settings > About Microsoft Edge).
- Apply the update immediately if the current version is older than the most recent Chromium release.
- Monitor Microsoft and Chrome release notes for any additional mitigations or patches.
Microsoft Edge inherits all Chromium security updates, so keeping the browser current is the primary defense.
Related vulnerabilities
Chromium CVE-2026-95296: Missing authorization in Core; update Chrome and Edge
Chromium CVE-2026-95296 reports a missing authorization issue in Core, with Microsoft Edge expected to inherit the fix through Chromium updates. Public details are limited, so defenders should deploy current Chrome and Edge stable releases and verify update channels. Custom Chromium-based applications should be checked for delayed patching.
Read briefing
Microsoft Edge Patch for CVE‑2026‑95375: BrowserTag Authorization Flaw
A Chromium BrowserTag authorization flaw (CVE‑2026‑95375) affects all Chromium‑based browsers. Microsoft Edge will receive the fix via its standard update channel. Defenders should update immediately and verify the patch.
Read briefing
Microsoft Edge Mobile UI Misrepresentation – CVE-2026-95288
Microsoft Edge on mobile devices is affected by CVE-2026-95288, a Chromium-based UI misrepresentation flaw. The issue is fixed in newer Chromium builds; update Edge to the latest version to mitigate.
Read briefing
CVE-2026-95314: Incorrect Authorization in Chromium HID – Edge Users Must Update
A flaw in Chromium’s HID handling allows improper authorization, affecting all Chromium‑based browsers including Microsoft Edge. The issue is fixed in the latest Chromium releases, and Edge will receive the patch in its next update. Defenders should verify their browser versions and apply updates immediately.
Read briefing