Advisories
Microsoft Edge Vulnerability CVE-2026-106350: Incorrect Authorization Fix Required
A flaw in Chromium’s authorization logic (CVE‑2026‑106350) affects Microsoft Edge (Chromium‑based). The issue allows bypassing privileged checks, potentially enabling unauthorized actions. Edge users should update to the latest release to mitigate the risk.
A recent CVE, CVE‑2026‑106350, was identified in Chromium’s authorization handling. Microsoft Edge, built on Chromium, inherits this flaw. The vulnerability permits bypassing authorization checks for privileged browser actions, which could lead to unauthorized data access or execution of malicious scripts.
Impact
Edge users on affected releases are at risk if an attacker can exploit the flaw to gain elevated privileges within the browser context. This could compromise credentials or allow execution of malicious scripts.
What to do
- Verify Edge version: edge://settings/help and ensure it is at least the latest patch level.
- Force an update via Windows Update or the Microsoft Edge installer.
- Audit any internal web applications that rely on Edge for administrative tasks and confirm they enforce proper authentication.
- Monitor for anomalous authentication activity and apply any additional hardening measures such as MFA.
Additional Resources
Microsoft Security Response Center: https://msrc.microsoft.com/update-guide
Related vulnerabilities
Microsoft Edge Vulnerability CVE-2026-106199: Incorrect Authorization
A critical authorization flaw (CVE-2026-106199) was discovered in the Chromium engine used by Microsoft Edge. Edge users running outdated versions are at risk of privilege escalation or unauthorized access. Defenders should update to the latest Edge release and monitor for anomalous authorization activity.
Read briefing
Microsoft Edge Addresses Chromium CVE-2026-106195: Incorrect Authorization Vulnerability
A Chromium bug (CVE-2026-106195) that allowed improper authorization was patched in the latest Chromium releases. Microsoft Edge (Chromium-based) automatically inherits this fix. Defenders should confirm Edge is updated to the newest version and monitor for related alerts.
Read briefing
Microsoft Edge Addresses Chromium CVE-2026-106389: Incorrect Authorization
A recent CVE-2026-106389 flaw in Chromium allows incorrect authorization. Microsoft Edge (Chromium-based) will incorporate the fix in upcoming releases. Defenders should verify Edge version and apply updates promptly.
Read briefing
Microsoft Edge Addresses Chromium CVE-2026-106297: Incorrect Authorization
A Chromium bug (CVE-2026-106297) permits incorrect authorization handling, potentially allowing malicious sites or extensions to gain elevated privileges. Microsoft Edge (Chromium-based) incorporates the upstream fix. Defenders should ensure Edge is updated and monitor for anomalous access attempts.
Read briefing