Chromium CVE-2026-106427: Confused deputy in Mobile. Microsoft gives no severity rating; exploitation status not stated; disclosure status not stated. Routine Microsoft Edge security update: Microsoft lists a fixed Edge build (155.0.4283.48). Informational here reflects routine browser servicing; it does not mean the update can be skipped.
Severity not ratedExploited not statedDisclosed not statedAffects Microsoft Edge (Chromium-based)Fix see release notes
What you should do
Microsoft Edge normally receives security updates automatically. Organizations managing browser updates should verify their normal deployment and compliance processes. from Microsoft's advisory data
Why: Routine browser servicing: Microsoft publishes a fixed build and Edge normally updates automatically.
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Type
Security updates
Tags
Microsoft Edge (Chromium-based), 2026-Oct
Microsoft advisory data
Customer action required: Yes · Exploited: not stated · Publicly disclosed: not stated · Remediation: update published
Classification
Derived from Microsoft's structured advisory fields, not by AI. Severity (n/a) is Microsoft's rating and is not treated as proof that action is needed.
Chromium CVE-2026-106419: Use after free in ANGLE. Microsoft gives no severity rating; exploitation status not stated; disclosure status not stated. Routine Microsoft Edge security update: Microsoft lists a fixed Edge build (155.0.4283.48). Informational here reflects routine browser servicing; it does not mean the update can be skipped.
Severity not ratedExploited not statedDisclosed not statedAffects Microsoft Edge (Chromium-based)Fix see release notes
What you should do
Microsoft Edge normally receives security updates automatically. Organizations managing browser updates should verify their normal deployment and compliance processes. from Microsoft's advisory data
Why: Routine browser servicing: Microsoft publishes a fixed build and Edge normally updates automatically.
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Type
Security updates
Tags
Microsoft Edge (Chromium-based), 2026-Oct
Microsoft advisory data
Customer action required: Yes · Exploited: not stated · Publicly disclosed: not stated · Remediation: update published
Classification
Derived from Microsoft's structured advisory fields, not by AI. Severity (n/a) is Microsoft's rating and is not treated as proof that action is needed.
Chromium CVE-2026-106414: Improper input validation in Mobile. Microsoft gives no severity rating; exploitation status not stated; disclosure status not stated. Routine Microsoft Edge security update: Microsoft lists a fixed Edge build (155.0.4283.48). Informational here reflects routine browser servicing; it does not mean the update can be skipped.
Severity not ratedExploited not statedDisclosed not statedAffects Microsoft Edge (Chromium-based)Fix see release notes
What you should do
Microsoft Edge normally receives security updates automatically. Organizations managing browser updates should verify their normal deployment and compliance processes. from Microsoft's advisory data
Why: Routine browser servicing: Microsoft publishes a fixed build and Edge normally updates automatically.
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Type
Security updates
Tags
Microsoft Edge (Chromium-based), 2026-Oct
Microsoft advisory data
Customer action required: Yes · Exploited: not stated · Publicly disclosed: not stated · Remediation: update published
Classification
Derived from Microsoft's structured advisory fields, not by AI. Severity (n/a) is Microsoft's rating and is not treated as proof that action is needed.
Chromium CVE-2026-106408: Protection mechanism failure in Mobile. Microsoft gives no severity rating; exploitation status not stated; disclosure status not stated. Routine Microsoft Edge security update: Microsoft lists a fixed Edge build (155.0.4283.48). Informational here reflects routine browser servicing; it does not mean the update can be skipped.
Severity not ratedExploited not statedDisclosed not statedAffects Microsoft Edge (Chromium-based)Fix see release notes
What you should do
Microsoft Edge normally receives security updates automatically. Organizations managing browser updates should verify their normal deployment and compliance processes. from Microsoft's advisory data
Why: Routine browser servicing: Microsoft publishes a fixed build and Edge normally updates automatically.
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Type
Security updates
Tags
Microsoft Edge (Chromium-based), 2026-Oct
Microsoft advisory data
Customer action required: Yes · Exploited: not stated · Publicly disclosed: not stated · Remediation: update published
Classification
Derived from Microsoft's structured advisory fields, not by AI. Severity (n/a) is Microsoft's rating and is not treated as proof that action is needed.
Chromium CVE-2026-106406: Missing authorization in Mobile. Microsoft gives no severity rating; exploitation status not stated; disclosure status not stated. Routine Microsoft Edge security update: Microsoft lists a fixed Edge build (155.0.4283.48). Informational here reflects routine browser servicing; it does not mean the update can be skipped.
Severity not ratedExploited not statedDisclosed not statedAffects Microsoft Edge (Chromium-based)Fix see release notes
What you should do
Microsoft Edge normally receives security updates automatically. Organizations managing browser updates should verify their normal deployment and compliance processes. from Microsoft's advisory data
Why: Routine browser servicing: Microsoft publishes a fixed build and Edge normally updates automatically.
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Type
Security updates
Tags
Microsoft Edge (Chromium-based), 2026-Oct
Microsoft advisory data
Customer action required: Yes · Exploited: not stated · Publicly disclosed: not stated · Remediation: update published
Classification
Derived from Microsoft's structured advisory fields, not by AI. Severity (n/a) is Microsoft's rating and is not treated as proof that action is needed.
Chromium CVE-2026-106405: Race condition in CustomTabs. Microsoft gives no severity rating; exploitation status not stated; disclosure status not stated. Routine Microsoft Edge security update: Microsoft lists a fixed Edge build (155.0.4283.48). Informational here reflects routine browser servicing; it does not mean the update can be skipped.
Severity not ratedExploited not statedDisclosed not statedAffects Microsoft Edge (Chromium-based)Fix see release notes
What you should do
Microsoft Edge normally receives security updates automatically. Organizations managing browser updates should verify their normal deployment and compliance processes. from Microsoft's advisory data
Why: Routine browser servicing: Microsoft publishes a fixed build and Edge normally updates automatically.
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Type
Security updates
Tags
Microsoft Edge (Chromium-based), 2026-Oct
Microsoft advisory data
Customer action required: Yes · Exploited: not stated · Publicly disclosed: not stated · Remediation: update published
Classification
Derived from Microsoft's structured advisory fields, not by AI. Severity (n/a) is Microsoft's rating and is not treated as proof that action is needed.
Chromium CVE-2026-106400: Clickjacking in Messages. Microsoft gives no severity rating; exploitation status not stated; disclosure status not stated. Routine Microsoft Edge security update: Microsoft lists a fixed Edge build (155.0.4283.48). Informational here reflects routine browser servicing; it does not mean the update can be skipped.
Severity not ratedExploited not statedDisclosed not statedAffects Microsoft Edge (Chromium-based)Fix see release notes
What you should do
Microsoft Edge normally receives security updates automatically. Organizations managing browser updates should verify their normal deployment and compliance processes. from Microsoft's advisory data
Why: Routine browser servicing: Microsoft publishes a fixed build and Edge normally updates automatically.
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Type
Security updates
Tags
Microsoft Edge (Chromium-based), 2026-Oct
Microsoft advisory data
Customer action required: Yes · Exploited: not stated · Publicly disclosed: not stated · Remediation: update published
Classification
Derived from Microsoft's structured advisory fields, not by AI. Severity (n/a) is Microsoft's rating and is not treated as proof that action is needed.
Chromium CVE-2026-106397: Incorrect authorization in Mobile. Microsoft gives no severity rating; exploitation status not stated; disclosure status not stated. Routine Microsoft Edge security update: Microsoft lists a fixed Edge build (155.0.4283.48). Informational here reflects routine browser servicing; it does not mean the update can be skipped.
Severity not ratedExploited not statedDisclosed not statedAffects Microsoft Edge (Chromium-based)Fix see release notes
What you should do
Microsoft Edge normally receives security updates automatically. Organizations managing browser updates should verify their normal deployment and compliance processes. from Microsoft's advisory data
Why: Routine browser servicing: Microsoft publishes a fixed build and Edge normally updates automatically.
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Type
Security updates
Tags
Microsoft Edge (Chromium-based), 2026-Oct
Microsoft advisory data
Customer action required: Yes · Exploited: not stated · Publicly disclosed: not stated · Remediation: update published
Classification
Derived from Microsoft's structured advisory fields, not by AI. Severity (n/a) is Microsoft's rating and is not treated as proof that action is needed.
Chromium CVE-2026-106395: Uninitialized resource in Dawn. Microsoft gives no severity rating; exploitation status not stated; disclosure status not stated. Routine Microsoft Edge security update: Microsoft lists a fixed Edge build (155.0.4283.48). Informational here reflects routine browser servicing; it does not mean the update can be skipped.
Severity not ratedExploited not statedDisclosed not statedAffects Microsoft Edge (Chromium-based)Fix see release notes
What you should do
Microsoft Edge normally receives security updates automatically. Organizations managing browser updates should verify their normal deployment and compliance processes. from Microsoft's advisory data
Why: Routine browser servicing: Microsoft publishes a fixed build and Edge normally updates automatically.
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Type
Security updates
Tags
Microsoft Edge (Chromium-based), 2026-Oct
Microsoft advisory data
Customer action required: Yes · Exploited: not stated · Publicly disclosed: not stated · Remediation: update published
Classification
Derived from Microsoft's structured advisory fields, not by AI. Severity (n/a) is Microsoft's rating and is not treated as proof that action is needed.
Chromium CVE-2026-106387: Missing authorization in Mobile. Microsoft gives no severity rating; exploitation status not stated; disclosure status not stated. Routine Microsoft Edge security update: Microsoft lists a fixed Edge build (155.0.4283.48). Informational here reflects routine browser servicing; it does not mean the update can be skipped.
Severity not ratedExploited not statedDisclosed not statedAffects Microsoft Edge (Chromium-based)Fix see release notes
What you should do
Microsoft Edge normally receives security updates automatically. Organizations managing browser updates should verify their normal deployment and compliance processes. from Microsoft's advisory data
Why: Routine browser servicing: Microsoft publishes a fixed build and Edge normally updates automatically.
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Type
Security updates
Tags
Microsoft Edge (Chromium-based), 2026-Oct
Microsoft advisory data
Customer action required: Yes · Exploited: not stated · Publicly disclosed: not stated · Remediation: update published
Classification
Derived from Microsoft's structured advisory fields, not by AI. Severity (n/a) is Microsoft's rating and is not treated as proof that action is needed.
Chromium CVE-2026-106380: UI misrepresentation in UI. Microsoft gives no severity rating; exploitation status not stated; disclosure status not stated. Routine Microsoft Edge security update: Microsoft lists a fixed Edge build (155.0.4283.48). Informational here reflects routine browser servicing; it does not mean the update can be skipped.
Severity not ratedExploited not statedDisclosed not statedAffects Microsoft Edge (Chromium-based)Fix see release notes
What you should do
Microsoft Edge normally receives security updates automatically. Organizations managing browser updates should verify their normal deployment and compliance processes. from Microsoft's advisory data
Why: Routine browser servicing: Microsoft publishes a fixed build and Edge normally updates automatically.
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Type
Security updates
Tags
Microsoft Edge (Chromium-based), 2026-Oct
Microsoft advisory data
Customer action required: Yes · Exploited: not stated · Publicly disclosed: not stated · Remediation: update published
Classification
Derived from Microsoft's structured advisory fields, not by AI. Severity (n/a) is Microsoft's rating and is not treated as proof that action is needed.
Chromium CVE-2026-106368: UI misrepresentation in UI. Microsoft gives no severity rating; exploitation status not stated; disclosure status not stated. Routine Microsoft Edge security update: Microsoft lists a fixed Edge build (155.0.4283.48). Informational here reflects routine browser servicing; it does not mean the update can be skipped.
Severity not ratedExploited not statedDisclosed not statedAffects Microsoft Edge (Chromium-based)Fix see release notes
What you should do
Microsoft Edge normally receives security updates automatically. Organizations managing browser updates should verify their normal deployment and compliance processes. from Microsoft's advisory data
Why: Routine browser servicing: Microsoft publishes a fixed build and Edge normally updates automatically.
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Type
Security updates
Tags
Microsoft Edge (Chromium-based), 2026-Oct
Microsoft advisory data
Customer action required: Yes · Exploited: not stated · Publicly disclosed: not stated · Remediation: update published
Classification
Derived from Microsoft's structured advisory fields, not by AI. Severity (n/a) is Microsoft's rating and is not treated as proof that action is needed.
Chromium CVE-2026-106367: Missing authorization in Mobile. Microsoft gives no severity rating; exploitation status not stated; disclosure status not stated. Routine Microsoft Edge security update: Microsoft lists a fixed Edge build (155.0.4283.48). Informational here reflects routine browser servicing; it does not mean the update can be skipped.
Severity not ratedExploited not statedDisclosed not statedAffects Microsoft Edge (Chromium-based)Fix see release notes
What you should do
Microsoft Edge normally receives security updates automatically. Organizations managing browser updates should verify their normal deployment and compliance processes. from Microsoft's advisory data
Why: Routine browser servicing: Microsoft publishes a fixed build and Edge normally updates automatically.
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Type
Security updates
Tags
Microsoft Edge (Chromium-based), 2026-Oct
Microsoft advisory data
Customer action required: Yes · Exploited: not stated · Publicly disclosed: not stated · Remediation: update published
Classification
Derived from Microsoft's structured advisory fields, not by AI. Severity (n/a) is Microsoft's rating and is not treated as proof that action is needed.
Chromium CVE-2026-106366: Incomplete cleanup in CustomTabs. Microsoft gives no severity rating; exploitation status not stated; disclosure status not stated. Routine Microsoft Edge security update: Microsoft lists a fixed Edge build (155.0.4283.48). Informational here reflects routine browser servicing; it does not mean the update can be skipped.
Severity not ratedExploited not statedDisclosed not statedAffects Microsoft Edge (Chromium-based)Fix see release notes
What you should do
Microsoft Edge normally receives security updates automatically. Organizations managing browser updates should verify their normal deployment and compliance processes. from Microsoft's advisory data
Why: Routine browser servicing: Microsoft publishes a fixed build and Edge normally updates automatically.
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Type
Security updates
Tags
Microsoft Edge (Chromium-based), 2026-Oct
Microsoft advisory data
Customer action required: Yes · Exploited: not stated · Publicly disclosed: not stated · Remediation: update published
Classification
Derived from Microsoft's structured advisory fields, not by AI. Severity (n/a) is Microsoft's rating and is not treated as proof that action is needed.
Chromium CVE-2026-106361: Incorrect provision of specified functionality in Mobile. Microsoft gives no severity rating; exploitation status not stated; disclosure status not stated. Routine Microsoft Edge security update: Microsoft lists a fixed Edge build (155.0.4283.48). Informational here reflects routine browser servicing; it does not mean the update can be skipped.
Severity not ratedExploited not statedDisclosed not statedAffects Microsoft Edge (Chromium-based)Fix see release notes
What you should do
Microsoft Edge normally receives security updates automatically. Organizations managing browser updates should verify their normal deployment and compliance processes. from Microsoft's advisory data
Why: Routine browser servicing: Microsoft publishes a fixed build and Edge normally updates automatically.
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Type
Security updates
Tags
Microsoft Edge (Chromium-based), 2026-Oct
Microsoft advisory data
Customer action required: Yes · Exploited: not stated · Publicly disclosed: not stated · Remediation: update published
Classification
Derived from Microsoft's structured advisory fields, not by AI. Severity (n/a) is Microsoft's rating and is not treated as proof that action is needed.
Chromium CVE-2026-106353: Improper input validation in Mobile. Microsoft gives no severity rating; exploitation status not stated; disclosure status not stated. Routine Microsoft Edge security update: Microsoft lists a fixed Edge build (155.0.4283.48). Informational here reflects routine browser servicing; it does not mean the update can be skipped.
Severity not ratedExploited not statedDisclosed not statedAffects Microsoft Edge (Chromium-based)Fix see release notes
What you should do
Microsoft Edge normally receives security updates automatically. Organizations managing browser updates should verify their normal deployment and compliance processes. from Microsoft's advisory data
Why: Routine browser servicing: Microsoft publishes a fixed build and Edge normally updates automatically.
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Type
Security updates
Tags
Microsoft Edge (Chromium-based), 2026-Oct
Microsoft advisory data
Customer action required: Yes · Exploited: not stated · Publicly disclosed: not stated · Remediation: update published
Classification
Derived from Microsoft's structured advisory fields, not by AI. Severity (n/a) is Microsoft's rating and is not treated as proof that action is needed.
Chromium CVE-2026-106337: UI misrepresentation in UI. Microsoft gives no severity rating; exploitation status not stated; disclosure status not stated. Routine Microsoft Edge security update: Microsoft lists a fixed Edge build (155.0.4283.48). Informational here reflects routine browser servicing; it does not mean the update can be skipped.
Severity not ratedExploited not statedDisclosed not statedAffects Microsoft Edge (Chromium-based)Fix see release notes
What you should do
Microsoft Edge normally receives security updates automatically. Organizations managing browser updates should verify their normal deployment and compliance processes. from Microsoft's advisory data
Why: Routine browser servicing: Microsoft publishes a fixed build and Edge normally updates automatically.
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Type
Security updates
Tags
Microsoft Edge (Chromium-based), 2026-Oct
Microsoft advisory data
Customer action required: Yes · Exploited: not stated · Publicly disclosed: not stated · Remediation: update published
Classification
Derived from Microsoft's structured advisory fields, not by AI. Severity (n/a) is Microsoft's rating and is not treated as proof that action is needed.
Chromium CVE-2026-106326: Confused deputy in UI. Microsoft gives no severity rating; exploitation status not stated; disclosure status not stated. Routine Microsoft Edge security update: Microsoft lists a fixed Edge build (155.0.4283.48). Informational here reflects routine browser servicing; it does not mean the update can be skipped.
Severity not ratedExploited not statedDisclosed not statedAffects Microsoft Edge (Chromium-based)Fix see release notes
What you should do
Microsoft Edge normally receives security updates automatically. Organizations managing browser updates should verify their normal deployment and compliance processes. from Microsoft's advisory data
Why: Routine browser servicing: Microsoft publishes a fixed build and Edge normally updates automatically.
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Type
Security updates
Tags
Microsoft Edge (Chromium-based), 2026-Oct
Microsoft advisory data
Customer action required: Yes · Exploited: not stated · Publicly disclosed: not stated · Remediation: update published
Classification
Derived from Microsoft's structured advisory fields, not by AI. Severity (n/a) is Microsoft's rating and is not treated as proof that action is needed.
Chromium CVE-2026-106320: Use of released resource in UI. Microsoft gives no severity rating; exploitation status not stated; disclosure status not stated. Routine Microsoft Edge security update: Microsoft lists a fixed Edge build (155.0.4283.48). Informational here reflects routine browser servicing; it does not mean the update can be skipped.
Severity not ratedExploited not statedDisclosed not statedAffects Microsoft Edge (Chromium-based)Fix see release notes
What you should do
Microsoft Edge normally receives security updates automatically. Organizations managing browser updates should verify their normal deployment and compliance processes. from Microsoft's advisory data
Why: Routine browser servicing: Microsoft publishes a fixed build and Edge normally updates automatically.
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Type
Security updates
Tags
Microsoft Edge (Chromium-based), 2026-Oct
Microsoft advisory data
Customer action required: Yes · Exploited: not stated · Publicly disclosed: not stated · Remediation: update published
Classification
Derived from Microsoft's structured advisory fields, not by AI. Severity (n/a) is Microsoft's rating and is not treated as proof that action is needed.
Chromium CVE-2026-106317: UI misrepresentation in FullScreen. Microsoft gives no severity rating; exploitation status not stated; disclosure status not stated. Routine Microsoft Edge security update: Microsoft lists a fixed Edge build (155.0.4283.48). Informational here reflects routine browser servicing; it does not mean the update can be skipped.
Severity not ratedExploited not statedDisclosed not statedAffects Microsoft Edge (Chromium-based)Fix see release notes
What you should do
Microsoft Edge normally receives security updates automatically. Organizations managing browser updates should verify their normal deployment and compliance processes. from Microsoft's advisory data
Why: Routine browser servicing: Microsoft publishes a fixed build and Edge normally updates automatically.
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Type
Security updates
Tags
Microsoft Edge (Chromium-based), 2026-Oct
Microsoft advisory data
Customer action required: Yes · Exploited: not stated · Publicly disclosed: not stated · Remediation: update published
Classification
Derived from Microsoft's structured advisory fields, not by AI. Severity (n/a) is Microsoft's rating and is not treated as proof that action is needed.
Chromium CVE-2026-106313: Incorrect authorization in Browser. Microsoft gives no severity rating; exploitation status not stated; disclosure status not stated. Routine Microsoft Edge security update: Microsoft lists a fixed Edge build (155.0.4283.48). Informational here reflects routine browser servicing; it does not mean the update can be skipped.
Severity not ratedExploited not statedDisclosed not statedAffects Microsoft Edge (Chromium-based)Fix see release notes
What you should do
Microsoft Edge normally receives security updates automatically. Organizations managing browser updates should verify their normal deployment and compliance processes. from Microsoft's advisory data
Why: Routine browser servicing: Microsoft publishes a fixed build and Edge normally updates automatically.
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Type
Security updates
Tags
Microsoft Edge (Chromium-based), 2026-Oct
Microsoft advisory data
Customer action required: Yes · Exploited: not stated · Publicly disclosed: not stated · Remediation: update published
Classification
Derived from Microsoft's structured advisory fields, not by AI. Severity (n/a) is Microsoft's rating and is not treated as proof that action is needed.
Chromium CVE-2026-106305: UI misrepresentation in Mobile. Microsoft gives no severity rating; exploitation status not stated; disclosure status not stated. Routine Microsoft Edge security update: Microsoft lists a fixed Edge build (155.0.4283.48). Informational here reflects routine browser servicing; it does not mean the update can be skipped.
Severity not ratedExploited not statedDisclosed not statedAffects Microsoft Edge (Chromium-based)Fix see release notes
What you should do
Microsoft Edge normally receives security updates automatically. Organizations managing browser updates should verify their normal deployment and compliance processes. from Microsoft's advisory data
Why: Routine browser servicing: Microsoft publishes a fixed build and Edge normally updates automatically.
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Type
Security updates
Tags
Microsoft Edge (Chromium-based), 2026-Oct
Microsoft advisory data
Customer action required: Yes · Exploited: not stated · Publicly disclosed: not stated · Remediation: update published
Classification
Derived from Microsoft's structured advisory fields, not by AI. Severity (n/a) is Microsoft's rating and is not treated as proof that action is needed.
Chromium CVE-2026-106298: Use after free in Chrome Tabs. Microsoft gives no severity rating; exploitation status not stated; disclosure status not stated. Routine Microsoft Edge security update: Microsoft lists a fixed Edge build (155.0.4283.48). Informational here reflects routine browser servicing; it does not mean the update can be skipped.
Severity not ratedExploited not statedDisclosed not statedAffects Microsoft Edge (Chromium-based)Fix see release notes
What you should do
Microsoft Edge normally receives security updates automatically. Organizations managing browser updates should verify their normal deployment and compliance processes. from Microsoft's advisory data
Why: Routine browser servicing: Microsoft publishes a fixed build and Edge normally updates automatically.
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Type
Security updates
Tags
Microsoft Edge (Chromium-based), 2026-Oct
Microsoft advisory data
Customer action required: Yes · Exploited: not stated · Publicly disclosed: not stated · Remediation: update published
Classification
Derived from Microsoft's structured advisory fields, not by AI. Severity (n/a) is Microsoft's rating and is not treated as proof that action is needed.
Chromium CVE-2026-106296: Improper privilege management in UI. Microsoft gives no severity rating; exploitation status not stated; disclosure status not stated. Routine Microsoft Edge security update: Microsoft lists a fixed Edge build (155.0.4283.48). Informational here reflects routine browser servicing; it does not mean the update can be skipped.
Severity not ratedExploited not statedDisclosed not statedAffects Microsoft Edge (Chromium-based)Fix see release notes
What you should do
Microsoft Edge normally receives security updates automatically. Organizations managing browser updates should verify their normal deployment and compliance processes. from Microsoft's advisory data
Why: Routine browser servicing: Microsoft publishes a fixed build and Edge normally updates automatically.
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Type
Security updates
Tags
Microsoft Edge (Chromium-based), 2026-Oct
Microsoft advisory data
Customer action required: Yes · Exploited: not stated · Publicly disclosed: not stated · Remediation: update published
Classification
Derived from Microsoft's structured advisory fields, not by AI. Severity (n/a) is Microsoft's rating and is not treated as proof that action is needed.
Chromium CVE-2026-106290: Uninitialized resource in GPU. Microsoft gives no severity rating; exploitation status not stated; disclosure status not stated. Routine Microsoft Edge security update: Microsoft lists a fixed Edge build (155.0.4283.48). Informational here reflects routine browser servicing; it does not mean the update can be skipped.
Severity not ratedExploited not statedDisclosed not statedAffects Microsoft Edge (Chromium-based)Fix see release notes
What you should do
Microsoft Edge normally receives security updates automatically. Organizations managing browser updates should verify their normal deployment and compliance processes. from Microsoft's advisory data
Why: Routine browser servicing: Microsoft publishes a fixed build and Edge normally updates automatically.
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Type
Security updates
Tags
Microsoft Edge (Chromium-based), 2026-Oct
Microsoft advisory data
Customer action required: Yes · Exploited: not stated · Publicly disclosed: not stated · Remediation: update published
Classification
Derived from Microsoft's structured advisory fields, not by AI. Severity (n/a) is Microsoft's rating and is not treated as proof that action is needed.