Vulnerabilities
Microsoft Edge (Chromium) CVE-2026-106333: Incorrect Authorization Vulnerability
A critical authorization flaw (CVE‑2026‑106333) was discovered in Chromium, the engine powering Microsoft Edge. The bug allows an attacker to bypass access controls in certain contexts, potentially exposing sensitive data. Edge users should verify they are running the latest version and apply the update immediately.
What happened
A flaw in Chromium’s authorization logic (CVE‑2026‑106333) was identified by Google. The defect can be exploited to gain unauthorized access to protected resources when the browser is used in a compromised environment.
Impact
Microsoft Edge users on affected versions may be able to bypass security checks, leading to data leakage or privilege escalation. The vulnerability is limited to the browser context and does not affect the underlying operating system.
What to do
Defenders should:
- Confirm Edge version: it must be 125.0.6422.60 or newer.
- Apply the latest update through Windows Update or the Microsoft Edge installer.
- Monitor for anomalous authentication attempts in browser logs.
- Review any custom extensions that might interact with authentication flows.
Microsoft recommends updating to the latest Edge release to mitigate this issue.
Related vulnerabilities
Microsoft Edge Vulnerability CVE-2026-106199: Incorrect Authorization
A critical authorization flaw (CVE-2026-106199) was discovered in the Chromium engine used by Microsoft Edge. Edge users running outdated versions are at risk of privilege escalation or unauthorized access. Defenders should update to the latest Edge release and monitor for anomalous authorization activity.
Read briefing
Microsoft Edge (Chromium) Vulnerability CVE-2026-102322: Incorrect Authorization
A Chromium-based authorization flaw (CVE-2026-102322) affects Microsoft Edge. Edge users should update to the latest release to mitigate the risk.
Read briefing
Microsoft Edge (Chromium) Vulnerability CVE‑2026‑106352: Incorrect Authorization
A Chromium bug (CVE‑2026‑106352) permits improper authorization checks, potentially exposing protected resources. Microsoft Edge inherits the flaw via its Chromium base. Defenders should apply the latest Edge updates and confirm other Chromium‑based browsers are patched.
Read briefing
Microsoft Edge (Chromium) Vulnerability CVE-2026-106403: Incorrect Authorization
A flaw in Chromium's authorization logic (CVE-2026-106403) propagates to Microsoft Edge (Chromium-based), allowing unauthorized access to privileged resources. Defenders should update Edge to the latest patch and monitor for anomalous activity.
Read briefing