Vulnerabilities
Microsoft Edge Vulnerability CVE-2026-95370: NFC Implementation Flaw
A flaw in Chromium’s NFC handling (CVE‑2026‑95370) can allow attackers to exploit improper data validation. Microsoft Edge, built on Chromium, inherits the issue. Defenders should verify Edge is updated to the latest release and consider disabling NFC features if not required.
What Happened
Chromium introduced a flaw in its NFC stack that fails to properly validate incoming data, allowing potential exploitation of the NFC interface. The issue is identified as CVE‑2026‑95370.
Impact
Microsoft Edge inherits the flaw because it uses Chromium’s code base. An attacker could potentially execute arbitrary code or gain elevated privileges on a device that processes NFC data.
Mitigation
- Ensure Microsoft Edge is updated to the latest Chromium‑based release (version X.Y.Z or later).
- Disable NFC functionality on devices where it is not required.
- Apply any vendor‑specific security patches that address NFC handling.
Monitoring & Response
Watch for anomalous NFC traffic or unexpected process activity in system logs. If suspicious activity is detected, isolate the affected device and run a full malware scan.
Related vulnerabilities
Chromium CVE-2026-95324: Uninitialized GPU Resource Vulnerability
A flaw in Chromium’s GPU handling allows an attacker to exploit an uninitialized resource, potentially leading to memory corruption or arbitrary code execution. Microsoft Edge, built on Chromium, incorporates the same fix, so updating to the latest Edge version mitigates the risk. Defenders should verify Edge is current and monitor GPU activity for anomalies.
Read briefing
CVE-2026-95358: Incorrect Authorization in Chromium Mobile – Edge and Chrome Update Required
A new CVE, CVE-2026-95358, exposes an incorrect authorization flaw in Chromium’s mobile implementation. The issue is present in all Chromium‑based browsers, including Microsoft Edge, and is fixed in the latest stable releases. Defenders should verify that Edge and Chrome are updated to the patched versions and monitor for any related exploitation activity.
Read briefing
Microsoft Edge WebGL Out-of-Bounds Write (CVE-2026-95329) – Immediate Update Required
A memory corruption flaw in Edge’s WebGL implementation allows an attacker to trigger an out‑of‑bounds write, potentially leading to arbitrary code execution. The issue is fixed in the latest Chromium‑based Edge releases. Defenders should update Edge immediately and verify the patch.
Read briefing
Chromium CVE-2026-95327: Information Leak in Networking
A flaw in Chromium’s networking stack allows sensitive data leakage. Microsoft Edge (Chromium‑based) is affected. Defenders should update to the latest Edge release to mitigate the risk.
Read briefing