Vulnerabilities
Microsoft Edge WebGL Out-of-Bounds Write (CVE-2026-95329) – Immediate Update Required
A memory corruption flaw in Edge’s WebGL implementation allows an attacker to trigger an out‑of‑bounds write, potentially leading to arbitrary code execution. The issue is fixed in the latest Chromium‑based Edge releases. Defenders should update Edge immediately and verify the patch.
What Happened
A flaw in the WebGL subsystem of Chromium caused an out‑of‑bounds write that could be exploited to execute arbitrary code. The vulnerability, identified as CVE‑2026‑95329, was assigned by Google and subsequently incorporated into Microsoft Edge’s Chromium base.
Impact
When triggered, the write can corrupt memory, enabling an attacker to hijack execution flow. The flaw is exploitable only in contexts where WebGL is enabled and the attacker can supply crafted graphics data.
What to Do
- Ensure Microsoft Edge is updated to the latest version (Edge 130+). The patch is included in the Chromium update cycle.
- Verify that the update applied by checking the browser’s About page or running edge --version.
- If WebGL is not required for your environment, consider disabling it via group policy or browser flags to reduce attack surface.
- Monitor Microsoft security advisories for any related patches or work‑arounds.
Related vulnerabilities
Microsoft Edge Patch for CVE‑2026‑95349: WebGL Buffer Overflow
A buffer overflow in WebGL was identified in Chromium, impacting all Chromium‑based browsers including Microsoft Edge. Microsoft has fixed the issue in the latest Edge release. Defenders should update Edge, verify the patch, and monitor for exploitation attempts.
Read briefing
Chromium CVE‑2026‑95357: GPU Out‑of‑Bounds Write Fixed in Latest Edge Release
A recent Chromium vulnerability (CVE‑2026‑95357) allowed an out‑of‑bounds write in the GPU driver, potentially enabling arbitrary code execution. Microsoft Edge (Chromium‑based) now includes the fix. Defenders should verify that Edge and Chrome are updated to the latest patch and monitor for anomalous GPU activity.
Read briefing
Windows Overlay Filter RCE Vulnerability (CVE‑2026‑69959) – Immediate Patch Required
Microsoft has disclosed a high‑severity out‑of‑bounds read in the Windows Overlay Filter that allows an authorized user to execute arbitrary code locally. The flaw is fixed in the latest security update; administrators must apply the patch and verify system integrity.
Read briefing
Chromium CVE-2026-95327: Information Leak in Networking
A flaw in Chromium’s networking stack allows sensitive data leakage. Microsoft Edge (Chromium‑based) is affected. Defenders should update to the latest Edge release to mitigate the risk.
Read briefing