Vulnerabilities
Microsoft Edge Fixes Chromium CVE-2026-95287: Missing Authorization in Navigation
A missing authorization check in Chromium’s navigation handling (CVE‑2026‑95287) could allow attackers to force the browser to navigate to arbitrary URLs without user consent. Microsoft Edge, built on Chromium, has incorporated the fix. Update to the latest Edge release to mitigate.
What happened
A missing authorization check in Chromium’s navigation handling (CVE‑2026‑95287) could allow attackers to force the browser to navigate to arbitrary URLs without user consent.
Impact
Any Chromium‑based browser, including Microsoft Edge, could be tricked into navigating to malicious sites, potentially leading to phishing or drive‑by downloads. The flaw does not grant direct code execution but can be leveraged to bypass user interaction.
What to do
Update Microsoft Edge to the latest version that includes the Chromium patch. Verify that the browser’s version number reflects the recent security update. Monitor for any anomalous navigation behavior in your environment.
Related vulnerabilities
Chromium Contextual Tasks authorization flaw (CVE-2026-95297) affects Chromium-based browsers
Chromium has assigned CVE-2026-95297 for a missing authorization issue in Contextual Tasks. The advisory indicates the fix is being addressed in Chromium and will be ingested by Chromium-based products such as Microsoft Edge. Defenders should deploy current stable browser builds, verify deployed versions, and monitor vendor release notes for exact version ranges and severity.
Read briefing
Chromium CVE-2026-95296: Missing authorization in Core; update Chrome and Edge
Chromium CVE-2026-95296 reports a missing authorization issue in Core, with Microsoft Edge expected to inherit the fix through Chromium updates. Public details are limited, so defenders should deploy current Chrome and Edge stable releases and verify update channels. Custom Chromium-based applications should be checked for delayed patching.
Read briefing
Microsoft Edge Addresses Chromium Safe Browsing Authorization Flaw (CVE-2026-95292)
A recent Chromium vulnerability (CVE-2026-95292) exposed incorrect authorization handling in Safe Browsing. Microsoft Edge, built on Chromium, has incorporated the fix. Update Edge to mitigate the risk.
Read briefing
Microsoft Edge Patch for CVE‑2026‑95375: BrowserTag Authorization Flaw
A Chromium BrowserTag authorization flaw (CVE‑2026‑95375) affects all Chromium‑based browsers. Microsoft Edge will receive the fix via its standard update channel. Defenders should update immediately and verify the patch.
Read briefing