Vulnerabilities
Microsoft Edge (Chromium) – CVE-2026-95319 Use-After-Free in Printing
A use‑after‑free flaw in the Chromium printing engine (CVE‑2026‑95319) can allow local code execution on systems running Microsoft Edge. The issue is already fixed in the latest Chromium releases. Edge users should update immediately and consider disabling printing until a patch is applied.
What happened
A use‑after‑free vulnerability (CVE‑2026‑95319) was discovered in the Chromium printing subsystem. The flaw can be triggered by a crafted print job and may allow an attacker to execute arbitrary code in the context of the user.
Impact
- Local code execution on machines running Microsoft Edge (Chromium‑based) or any Chromium‑derived browser that has not applied the patch.
- Potential privilege escalation if the user is an administrator.
- No known remote exploitation; requires local access or a malicious document that triggers printing.
What to do
- Verify the Edge version: it should be 125.0.6422.60 or newer. If not, update to the latest release.
- Apply the Windows Security Update for CVE‑2026‑95319 (KBxxxxxx) as soon as it becomes available.
- Consider disabling the Print feature in Edge via policy (PrintPreviewEnabled = false) if printing is not required.
- Run a quick audit of all Chromium‑based browsers on the network to ensure they are patched.
Microsoft Edge inherits the Chromium fix; no separate Edge‑only patch is required.
Related vulnerabilities
Chromium CVE‑2026‑95356: Use‑After‑Free in WindowDialog
A use‑after‑free flaw in Chromium’s WindowDialog component (CVE‑2026‑95356) can enable arbitrary code execution via malicious web content. Microsoft Edge, which incorporates Chromium, is affected until the patch is applied. Defenders should update to the latest Edge release and monitor for anomalous browser activity.
Read briefing
Chromium CVE‑2026‑95325: Use‑After‑Free in ANGLE Affects Microsoft Edge
A use‑after‑free flaw in Chromium’s ANGLE graphics layer (CVE‑2026‑95325) can lead to arbitrary code execution in Microsoft Edge (Chromium‑based). The issue is fixed in the latest Edge releases. Defenders should verify their Edge version and apply the update immediately.
Read briefing
Chromium CVE-2026-87455: Use‑after‑free in Aura Affects Microsoft Edge
A use‑after‑free flaw in Chromium’s Aura layer (CVE‑2026‑87455) can allow arbitrary code execution. Microsoft Edge, built on Chromium, inherits the issue and is fixed in the latest releases. Defenders should update Edge and monitor for patches.
Read briefing
Microsoft Edge Addresses Chromium CVE-2026-95313 Use‑After‑Free in Fullscreen
A use‑after‑free flaw (CVE‑2026‑95313) was found in Chromium’s fullscreen handling. Microsoft Edge, built on Chromium, has incorporated the patch. Defenders should verify that Edge is updated to the latest release and monitor for any anomalous fullscreen activity.
Read briefing