rootpwn

Vulnerabilities

Microsoft Edge Faces Use-After-Free Vulnerability in Chromium (CVE-2026-110172)

A use‑after‑free flaw in Chromium’s rendering engine (CVE‑2026‑110172) now affects Microsoft Edge (Chromium‑based). The defect could allow memory corruption and potentially remote code execution. Edge users should update to the latest release immediately.

What Happened

Chromium introduced a use‑after‑free bug in its rendering pipeline (CVE‑2026‑110172). Because Microsoft Edge is built on Chromium, the flaw propagates to Edge without modification.

Impact

Exploit could corrupt memory and enable arbitrary code execution on the client machine. No public exploitation has been reported yet, but the severity is considered high due to the nature of the flaw.

What to Do

Defenders should:

  • Verify that Edge is updated to the latest version (see Microsoft Edge release notes).
  • Apply the update as soon as possible to eliminate the use‑after‑free path.
  • Monitor for anomalous memory corruption or exploitation attempts in logs.

Chromium Edge Use-after-free Vulnerability Patch Memory corruption

← All news