Vulnerabilities
Microsoft Edge Addresses Race Condition in Chromium Editing (CVE‑2026‑95360)
A race condition in Chromium’s editing engine could allow exploitation. Microsoft Edge (Chromium‑based) has incorporated the fix. Defenders should update to the latest Edge version to mitigate the risk.
What happened
A race condition was discovered in Chromium’s editing engine that could potentially allow an attacker to trigger undefined behavior during text manipulation.
Impact
Microsoft Edge (Chromium‑based) inherits the same code base, so the vulnerability applies to all Edge installations that have not yet applied the latest security patch.
Mitigation
Update Microsoft Edge to the most recent release. The fix is included in the latest Chromium build and is automatically applied in Edge updates.
Recommended actions
- Verify current Edge version on all endpoints.
- Force an update or schedule a reboot to apply the latest security patch.
- Monitor for any anomalous editing or rendering behavior that could indicate exploitation.
Additional information
For details on the Chromium release that contains the fix, refer to the Google Chrome Release notes.
Related vulnerabilities
Microsoft Edge Vulnerability CVE‑2026‑106412: Race Condition in Chromium
A race condition in Chromium (CVE‑2026‑106412) affects Microsoft Edge users. The flaw can enable arbitrary code execution via malicious web content. Defenders should update Edge to the patched version and monitor for suspicious activity.
Read briefing
Microsoft Edge Addresses Chromium CVE-2026-95280: V8 Race Condition
Microsoft Edge has incorporated a fix for the Chromium CVE-2026-95280 race condition in the V8 JavaScript engine. The flaw could allow attackers to trigger undefined behavior while rendering web content. Edge users should update to the latest release to ensure the patch is applied.
Read briefing
Chromium CVE-2026-95344: Race Condition in DevTools Affects Microsoft Edge
A race condition in Chromium's DevTools (CVE‑2026‑95344) can allow attackers to exploit timing issues during debugging sessions. The flaw is present in all Chromium‑based browsers, including Microsoft Edge, until the latest update. Defenders should verify that Edge is updated to the most recent release and monitor for any abnormal DevTools activity.
Read briefing
Microsoft Edge Mobile UI Misrepresentation – CVE-2026-95288
Microsoft Edge on mobile devices is affected by CVE-2026-95288, a Chromium-based UI misrepresentation flaw. The issue is fixed in newer Chromium builds; update Edge to the latest version to mitigate.
Read briefing