Vulnerabilities
Microsoft Edge Patch for CVE-2026-106180 Addresses Chromium Vulnerability
Microsoft Edge users are affected by the Chromium CVE-2026-106180 vulnerability, which can expose rendering discrepancies. The issue is fixed in the latest Edge releases, and defenders should ensure their browsers are up to date. Regular update checks and monitoring of MSRC advisories are recommended.
What Happened
A recently identified Chromium bug, CVE-2026-106180, was reported by Google. The flaw creates an observable discrepancy in rendering that could be leveraged by an attacker to gain information about the browsing context.
Impact
Microsoft Edge (Chromium-based) incorporates the same rendering engine, so the vulnerability is present in all Edge builds that include the affected Chromium version. The risk is limited to users who have not applied the latest browser update.
What to Do
Defenders should verify that Edge is running the most recent release. The fix is delivered automatically through Windows Update and the Microsoft Edge update channel.
- Check the current Edge version (edge://settings/help).
- Force an update via Windows Update or the Edge update mechanism.
- Monitor the Microsoft Security Response Center for any new advisories or exploitation activity.
Microsoft Edge automatically applies the Chromium patch as part of its standard update cycle.
Related vulnerabilities
Microsoft Edge Addresses Chromium CVE-2026-106336 Vulnerability
A recent CVE‑2026‑106336 flaw in Chromium has been mitigated in Microsoft Edge (Chromium‑based). Edge users should apply the latest update to eliminate the risk. Defenders should verify patch status and monitor for exploitation attempts.
Read briefing
Microsoft Edge Addresses Chromium CVE-2026-106331 Input Validation Vulnerability
A recent Chromium bug (CVE‑2026‑106331) that allowed improper input validation has been fixed in Microsoft Edge. Edge users should confirm they are on the latest release to avoid exploitation. The patch is part of the current Chromium-based Edge update.
Read briefing
Microsoft Edge Addresses Chromium CVE-2026-106195: Incorrect Authorization Vulnerability
A Chromium bug (CVE-2026-106195) that allowed improper authorization was patched in the latest Chromium releases. Microsoft Edge (Chromium-based) automatically inherits this fix. Defenders should confirm Edge is updated to the newest version and monitor for related alerts.
Read briefing
Microsoft Edge Addresses Chromium CVE-2026-106311 Clickjacking Vulnerability
Microsoft Edge has patched a clickjacking vulnerability (CVE-2026-106311) inherited from Chromium. The fix is included in the latest Edge releases. Defenders should update Edge and verify that clickjacking protections are active.
Read briefing