Vulnerabilities
Microsoft Edge Vulnerability CVE‑2026‑106412: Race Condition in Chromium
A race condition in Chromium (CVE‑2026‑106412) affects Microsoft Edge users. The flaw can enable arbitrary code execution via malicious web content. Defenders should update Edge to the patched version and monitor for suspicious activity.
What happened
A race condition was discovered in Chromium’s rendering engine (CVE‑2026‑106412). The flaw can be triggered by concurrent access to shared resources during page rendering, potentially allowing an attacker to execute arbitrary code.
Impact
Microsoft Edge (Chromium‑based) incorporates the affected Chromium code. Users of Edge running a version that includes the vulnerable code may be exposed to code execution if a malicious site is visited.
What to do
- Verify that your Edge installation is at least the version that includes the patch (see Microsoft Security Advisory).
- Force a browser update or enable automatic updates to receive the fix immediately.
- Monitor for any anomalous activity that could indicate exploitation of the race condition.
Mitigation
Apply the latest Edge update. No additional configuration changes are required beyond keeping the browser current.
Related vulnerabilities
Microsoft Edge Addresses Race Condition in Chromium Editing (CVE‑2026‑95360)
A race condition in Chromium’s editing engine could allow exploitation. Microsoft Edge (Chromium‑based) has incorporated the fix. Defenders should update to the latest Edge version to mitigate the risk.
Read briefing
Microsoft Edge Addresses Chromium CVE-2026-95280: V8 Race Condition
Microsoft Edge has incorporated a fix for the Chromium CVE-2026-95280 race condition in the V8 JavaScript engine. The flaw could allow attackers to trigger undefined behavior while rendering web content. Edge users should update to the latest release to ensure the patch is applied.
Read briefing
Chromium CVE-2026-95344: Race Condition in DevTools Affects Microsoft Edge
A race condition in Chromium's DevTools (CVE‑2026‑95344) can allow attackers to exploit timing issues during debugging sessions. The flaw is present in all Chromium‑based browsers, including Microsoft Edge, until the latest update. Defenders should verify that Edge is updated to the most recent release and monitor for any abnormal DevTools activity.
Read briefing
Microsoft Edge Mobile UI Misrepresentation – CVE-2026-95288
Microsoft Edge on mobile devices is affected by CVE-2026-95288, a Chromium-based UI misrepresentation flaw. The issue is fixed in newer Chromium builds; update Edge to the latest version to mitigate.
Read briefing