Vulnerabilities
Microsoft Edge Mobile UI Misrepresentation – CVE-2026-95288
Microsoft Edge on mobile devices is affected by CVE-2026-95288, a Chromium-based UI misrepresentation flaw. The issue is fixed in newer Chromium builds; update Edge to the latest version to mitigate.
Microsoft Edge users on mobile devices may experience UI misrepresentation due to a flaw identified as CVE-2026-95288 in the underlying Chromium engine.
What happened
The vulnerability allows an attacker to alter the visual representation of UI elements, potentially misleading users about the state of a page or application.
Impact
Only mobile installations of Microsoft Edge that are running a Chromium version prior to the fix are affected. Desktop versions are not impacted.
Mitigation
- Verify your Edge version: it should be 120.0.6099.0 or later (the exact version may vary).
- Install the latest Windows or iOS/macOS update that includes the patched Chromium build.
- Enable automatic updates to ensure future patches are applied promptly.
What to do now
Check the current Edge version on each device, push the update through your device management system, and monitor for any UI anomalies that could indicate exploitation.
Microsoft Edge inherits Chromium security updates automatically; no separate action is required beyond keeping the browser current.
Related vulnerabilities
Microsoft Edge Addresses UI Misrepresentation in ExtensionsMenu (CVE-2026-95307)
A UI misrepresentation flaw in Chromium’s ExtensionsMenu (CVE-2026-95307) could mislead users about extension status. Microsoft Edge, built on Chromium, has incorporated the fix. Defenders should verify Edge is updated to the latest version and monitor extension activity.
Read briefing
Chromium UI Misrepresentation CVE-2026-95323 Affects Chrome and Edge
A flaw in Chromium’s rendering engine can cause UI elements to be displayed incorrectly, creating a risk of user confusion or phishing. The issue, identified as CVE‑2026‑95323, was assigned by Google and has been addressed in recent Chrome releases. Microsoft Edge, which relies on the same Chromium codebase, also includes the mitigation.
Read briefing
Chromium CVE-2026-95327: Information Leak in Networking
A flaw in Chromium’s networking stack allows sensitive data leakage. Microsoft Edge (Chromium‑based) is affected. Defenders should update to the latest Edge release to mitigate the risk.
Read briefing
CVE-2026-95358: Incorrect Authorization in Chromium Mobile – Edge and Chrome Update Required
A new CVE, CVE-2026-95358, exposes an incorrect authorization flaw in Chromium’s mobile implementation. The issue is present in all Chromium‑based browsers, including Microsoft Edge, and is fixed in the latest stable releases. Defenders should verify that Edge and Chrome are updated to the patched versions and monitor for any related exploitation activity.
Read briefing