Vulnerabilities
Microsoft Edge (Chromium) Vulnerability CVE-2026-106203: Incomplete Cleanup
Microsoft Edge (Chromium-based) is vulnerable to CVE-2026-106203, an incomplete cleanup flaw in Chromium that could allow arbitrary code execution. The issue is fixed in the latest Edge releases. Defenders should verify that their systems are running the patched version and apply updates promptly.
What happened
A flaw in Chromium’s cleanup logic (CVE-2026-106203) could allow an attacker to execute arbitrary code when a vulnerable page is rendered.
Impact
Microsoft Edge (Chromium-based) is affected. The vulnerability can lead to arbitrary code execution on the user’s machine. The issue is fixed in the latest Edge releases.
What to do
- Verify that Edge is updated to the latest version (currently 121.0.6167.160 or newer).
- Apply the Windows Update that includes the Edge patch.
- Monitor security logs for signs of exploitation attempts.
Related vulnerabilities
Chromium CVE‑2026‑95303: Incomplete Cleanup in SmartCard Component
A flaw in Chromium’s SmartCard module fails to fully release resources, potentially enabling exploitation. The issue is present in all Chromium‑based browsers, including Microsoft Edge. Defenders should apply the latest browser updates and monitor SmartCard usage.
Read briefing
Chromium CVE-2026-106294: Incomplete Cleanup in Edge and Other Chromium Browsers
Microsoft Edge and other Chromium-based browsers are affected by CVE-2026-106294, a flaw that leaves memory uncleaned after certain operations, potentially enabling code execution or data leakage. Defenders should update to the latest browser releases and monitor for anomalous activity. The issue is local and requires user interaction or a malicious web page.
Read briefing
Microsoft Edge Addresses Chromium CVE-2026-106336 Vulnerability
A recent CVE‑2026‑106336 flaw in Chromium has been mitigated in Microsoft Edge (Chromium‑based). Edge users should apply the latest update to eliminate the risk. Defenders should verify patch status and monitor for exploitation attempts.
Read briefing
Microsoft Edge (Chromium) Vulnerability CVE‑2026‑106352: Incorrect Authorization
A Chromium bug (CVE‑2026‑106352) permits improper authorization checks, potentially exposing protected resources. Microsoft Edge inherits the flaw via its Chromium base. Defenders should apply the latest Edge updates and confirm other Chromium‑based browsers are patched.
Read briefing