← Lark216 Home

Microsoft Update Intelligence

Administrator notices from Microsoft, summarised: what changed, and what you should do.

1Action Required 508Review Recommended
Microsoft Services 1
Product families
Microsoft 365
Clear
Advanced Filters
Review Recommended

Microsoft Edge: Ask Copilot about an image

Microsoft Edge adds a feature allowing users to ask Copilot about images directly from the context menu, with admin control via policies.

What you should do

Review the new Edge policies to understand how to control the availability of this feature in your environment. AI-suggested

Details

Original Microsoft text

Ask Copilot about an image in Edge enables users to instantly analyze images from the web by sending them directly to Copilot from the Edge context menu, making it easy to ask questions, gain insights, and understand visual content without leaving their browsing experience. Admins can control availability to this feature using the EdgeEntraCopilotPageContext and Microsoft365CopilotChatIconEnabled policies. GA date: January CY2027

Type
M365 Roadmap
Services
Entra ID
Tags
In development, General Availability, Worldwide (Standard Multi-Tenant), Microsoft Edge, Microsoft Copilot (Microsoft 365), Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Edge · verify against the original
Review Recommended

Microsoft Edge: Allow users to translate PDF documents into their preferred language

Microsoft Edge will allow users to translate PDF documents into their preferred language, with admin control via the TranslateEnabled policy. General Availability is in January 2027.

What you should do

Review and configure the TranslateEnabled policy as needed. AI-suggested

Details

Original Microsoft text

Users will be able to translate full PDF documents directly within the native PDF viewer in Microsoft Edge. The translated document opens in a new tab, making it easier to access content in their preferred language. Admins can control availability to this feature using the TranslateEnabled policy. GA date: January CY2027

Type
M365 Roadmap
Tags
In development, General Availability, Worldwide (Standard Multi-Tenant), Microsoft Edge, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Edge · verify against the original
Review Recommended

Microsoft Edge: Rewrite by Copilot in Edge is being upgraded to include enterprise data protection compliance standards

Microsoft Edge's Rewrite by Copilot feature is being updated to include enterprise data protection for commercial customers, but the release has been paused temporarily.

What you should do

Review the updated feature and its implications for your organization's data protection policies. AI-suggested

Details

Original Microsoft text

Rewrite by Copilot in Edge, which lets users edit typed text for tone, format, and length within an open page in Microsoft Edge, is being updated to include enterprise data protection for commercial customers. Once Rewrite is available, users signed in with a Microsoft Entra ID will have enterprise data protection when using the feature in Microsoft Edge. Updated March 20, 2026: We have paused release of this feature temporarily and will announce new release timelines soon. We apologize for any inconvenience. More info: https://learn.microsoft.com/en-us/copilot/edge GA date: October CY2026

Type
M365 Roadmap
Services
Entra ID
Tags
In development, General Availability, Worldwide (Standard Multi-Tenant), Microsoft Edge, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Edge · verify against the original
Review Recommended

Microsoft Edge: Extended Stable channel support for macOS

Microsoft Edge Extended Stable channel will be available for macOS, offering a slower 8-week release cycle.

What you should do

Review the release cycle changes to understand the implications for macOS device management. AI-suggested

Details

Original Microsoft text

Organizations managing macOS devices will be able to select the Microsoft Edge Extended Stable channel, providing a slower 8-week major release cycle, compared to the two-week major release cycle for Stable. GA date: January CY2027

Type
M365 Roadmap
Tags
In development, General Availability, Worldwide (Standard Multi-Tenant), Microsoft Edge, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Edge · verify against the original
Review Recommended

Microsoft Edge: Review your PDF notes and annotations in the Notes pane

Microsoft Edge will introduce a Notes pane for managing PDF annotations, making it easier for users to search, filter, and edit their notes.

What you should do

Admins should review the new Notes feature to understand how it can benefit their users. AI-suggested

Details

Original Microsoft text

The built-in PDF viewer in Microsoft Edge will include a Notes pane that lists highlights, text notes, ink notes and comments in page order allowing users to quickly revisit them without finding them page by page. Users can search and filter their annotations, jump to each one in the document, and edit, delete or add comments from the pane. Available for Windows and macOS devices GA date: January CY2027

Type
M365 Roadmap
Tags
In development, General Availability, Worldwide (Standard Multi-Tenant), Microsoft Edge, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Edge · verify against the original
Review Recommended

Microsoft Edge: Simplified Energy Saver

Microsoft Edge will simplify its energy saver feature, enabling it by default on low battery and when unplugged. Administrators can manage this via the BatterySaverModeAvailability policy.

What you should do

Review and configure the BatterySaverModeAvailability policy to manage the energy saver feature according to your organization's needs. AI-suggested

Details

Original Microsoft text

Energy saver, formerly known as efficiency mode, will have new defaults and different setting options. Edge will now support and recommend users to use the BatterySaverModeAvailability policy to manage the energy saver feature. The energy saver feature has been simplified to become enabled under two conditions: on low battery or when unplugged. The default will be for energy saver to be enabled on low battery. Energy saver will now have one mode. Users set to Balanced savings will be mapped to have energy saver enabled on low battery. Users set to Maximum savings will be mapped to have energy …

Type
M365 Roadmap
Tags
In development, General Availability, Worldwide (Standard Multi-Tenant), Microsoft Edge, Web
AI analysis
Medium priority · generated by qwen2.5:7b · possibly affects Edge · verify against the original
Review Recommended

Microsoft Edge: Organize and merge PDF files in the built-in PDF reader

Microsoft Edge now allows users to organize and merge PDF files within the built-in PDF reader. Admins can manage this feature using the PdfOrganizeAndMergeEnabled policy.

What you should do

Review the PdfOrganizeAndMergeEnabled policy to understand how it can be configured for your environment. AI-suggested

Details

Original Microsoft text

Users can organize and merge PDF files in the Microsoft Edge built-in PDF reader. They can select pages to extract, delete, rotate, or reorder, and save the result as a new PDF file. They can also merge the open PDF file with other PDF files that are open in Microsoft Edge tabs or stored on their device, to create a single PDF file. Files are processed on the device, and the original files aren't modified. Admins can manage this feature using the PdfOrganizeAndMergeEnabled policy. GA date: January CY2027

Type
M365 Roadmap
Tags
In development, General Availability, Worldwide (Standard Multi-Tenant), Microsoft Edge, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Edge · verify against the original
Review Recommended

Microsoft Edge: Auto-open Copilot side pane for Outlook links

Microsoft Edge will automatically open the Copilot side pane when users click on Outlook links, providing contextual insights. Admins can control this feature via a policy.

What you should do

Review the M365LinksAutoOpenCopilotEnabled policy to determine if this feature should be enabled or disabled in your environment. AI-suggested

Details

Original Microsoft text

When users open links from Outlook, Microsoft Edge can automatically open the Copilot side pane to provide contextual insights and actionable suggestion chips based on email and destination content - such as highlighting key points, and recommending next actions - without disrupting the browsing flow. This experience helps users quickly understand content, take action with fewer steps, and get more value from Copilot while extending productive browsing time in Edge. Admins can control availability to this feature using the M365LinksAutoOpenCopilotEnabled policy. GA date: December CY2026

Type
M365 Roadmap
Services
Microsoft 365 Apps
Tags
In development, General Availability, Worldwide (Standard Multi-Tenant), Microsoft Edge, Web
AI analysis
Low priority · generated by qwen2.5:7b · possibly affects Edge · verify against the original
Review Recommended

CVE-2026-96202: Windows Raw Image Extension Remote Code Execution Vulnerability

A critical security vulnerability in Windows Raw Image Extension allows remote code execution via a heap-based buffer overflow.

What you should do

Apply the security update as soon as possible to mitigate the risk. AI-suggested

Details

Original Microsoft text

Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network.

Severity
Critical · CVSS 8.8
Type
Security updates
Tags
Windows Raw Image Extension, Remote Code Execution, 2026-Oct
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Windows · verify against the original
Review Recommended

Chromium CVE-2026-87640: Out of bounds read in WebView

Microsoft Edge (Chromium-based) addresses a security vulnerability (CVE-2026-87640) related to an out-of-bounds read in WebView. Administrators should review for potential impacts.

What you should do

Review existing configurations to ensure they are not affected by the WebView vulnerability. AI-suggested

Details

Original Microsoft text

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Type
Security updates
Tags
Microsoft Edge (Chromium-based), 2026-Sep
AI analysis
Medium priority · generated by qwen2.5:7b · possibly affects Edge · verify against the original
Review Recommended

Chromium CVE-2026-87552: Missing authorization in TrustedWebActivities

Microsoft Edge (Chromium-based) addresses a missing authorization vulnerability in TrustedWebActivities. Administrators should review the Google Chrome Releases for more details.

What you should do

Review the Google Chrome Releases for any necessary configuration changes. AI-suggested

Details

Original Microsoft text

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Type
Security updates
Tags
Microsoft Edge (Chromium-based), 2026-Sep
AI analysis
Medium priority · generated by qwen2.5:7b · possibly affects Edge · verify against the original
Review Recommended

Chromium CVE-2026-87534: Missing authorization in WebView

Microsoft Edge (Chromium-based) addresses a missing authorization vulnerability (CVE-2026-87534) inherited from Chromium. Administrators should review for any necessary updates.

What you should do

Review and apply any available updates for Microsoft Edge to address the security vulnerability. AI-suggested

Details

Original Microsoft text

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Type
Security updates
Tags
Microsoft Edge (Chromium-based), 2026-Sep
AI analysis
High priority · generated by qwen2.5:7b · possibly affects Edge · verify against the original
Review Recommended

Chromium CVE-2026-87488: Use after free in WebGL

Microsoft Edge (Chromium-based) addresses a use after free vulnerability in WebGL. Administrators should review the Google Chrome Releases for more details.

What you should do

Review the Google Chrome Releases for any necessary actions or updates related to this vulnerability. AI-suggested

Details

Original Microsoft text

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Type
Security updates
Tags
Microsoft Edge (Chromium-based), 2026-Sep
AI analysis
Medium priority · generated by qwen2.5:7b · possibly affects Edge · verify against the original
Review Recommended

Chromium CVE-2026-87464: Use after free in WebGL

Microsoft Edge (Chromium-based) addresses a use after free vulnerability in WebGL. Administrators should review the Google Chrome Releases for more details.

What you should do

Review the Google Chrome Releases for any necessary actions related to this vulnerability. AI-suggested

Details

Original Microsoft text

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Type
Security updates
Tags
Microsoft Edge (Chromium-based), 2026-Sep
AI analysis
Medium priority · generated by qwen2.5:7b · possibly affects Edge · verify against the original
Review Recommended

Chromium CVE-2026-93380: Race condition in FileSystem

Microsoft Edge (Chromium-based) addresses a race condition vulnerability in the FileSystem. Administrators should review the Google Chrome Releases for more details.

What you should do

Review the Google Chrome Releases for any necessary actions related to this vulnerability. AI-suggested

Details

Original Microsoft text

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Type
Security updates
Tags
Microsoft Edge (Chromium-based), 2026-Sep
AI analysis
Medium priority · generated by qwen2.5:7b · possibly affects Edge · verify against the original
Review Recommended

Chromium CVE-2026-93377: Type confusion in V8

Microsoft Edge (Chromium-based) addresses a type confusion vulnerability in V8. Administrators should review the Google Chrome Releases for more details.

What you should do

Review the Google Chrome Releases for any necessary actions or updates related to this vulnerability. AI-suggested

Details

Original Microsoft text

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Type
Security updates
Tags
Microsoft Edge (Chromium-based), 2026-Sep
AI analysis
Medium priority · generated by qwen2.5:7b · possibly affects Edge · verify against the original
Review Recommended

Chromium CVE-2026-93372: Buffer overflow in WebGL

Microsoft Edge (Chromium-based) addresses a buffer overflow vulnerability in WebGL. Administrators should review the Google Chrome Releases for more details.

What you should do

Review the Google Chrome Releases for any necessary steps or updates related to this vulnerability. AI-suggested

Details

Original Microsoft text

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Type
Security updates
Tags
Microsoft Edge (Chromium-based), 2026-Sep
AI analysis
Medium priority · generated by qwen2.5:7b · possibly affects Edge · verify against the original
Review Recommended

Chromium CVE-2026-95357: Out of bounds write in GPU

Microsoft Edge (Chromium-based) addresses a critical out-of-bounds write vulnerability. Administrators should review updates from Google Chrome.

What you should do

Monitor and apply Google Chrome updates to ensure Microsoft Edge is protected. AI-suggested

Details

Original Microsoft text

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Severity
Critical · CVSS 9.6
Type
Security updates
Tags
Microsoft Edge (Chromium-based), 2026-Sep
AI analysis
High priority · generated by qwen2.5:7b · possibly affects Edge · verify against the original
Review Recommended

Chromium CVE-2026-95349: Buffer overflow in WebGL

Microsoft Edge (Chromium-based) addresses a critical buffer overflow vulnerability in WebGL. Administrators should review the Google Chrome Releases for more information.

What you should do

Review the Google Chrome Releases for any necessary actions or updates related to this vulnerability. AI-suggested

Details

Original Microsoft text

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Severity
Critical · CVSS 9.6
Type
Security updates
Tags
Microsoft Edge (Chromium-based), 2026-Sep
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Edge · verify against the original
Review Recommended

Chromium CVE-2026-95322: Out of bounds write in GPU

Microsoft Edge (Chromium-based) addresses a critical out-of-bounds write vulnerability. Administrators should review updates from Google Chrome.

What you should do

Check for and install the latest Edge updates from Microsoft Update or the Microsoft Update Catalog. AI-suggested

Details

Original Microsoft text

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Severity
Critical · CVSS 8.3
Type
Security updates
Tags
Microsoft Edge (Chromium-based), 2026-Sep
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Edge · verify against the original
Review Recommended

Chromium CVE-2026-95313: Use after free in Fullscreen

Microsoft Edge (Chromium-based) addresses a critical use-after-free vulnerability. Administrators should review for potential impacts.

What you should do

Review existing Edge configurations for any potential impacts and ensure updates are applied promptly. AI-suggested

Details

Original Microsoft text

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Severity
Critical · CVSS 9.6
Type
Security updates
Tags
Microsoft Edge (Chromium-based), 2026-Sep
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Edge · verify against the original
Review Recommended

Chromium CVE-2026-95284: Buffer overflow in ANGLE

Microsoft Edge (Chromium-based) addresses a critical buffer overflow vulnerability (CVE-2026-95284) from Chromium. Administrators should review for potential impacts.

What you should do

Review current Edge configurations for any potential impacts and ensure updates are applied promptly. AI-suggested

Details

Original Microsoft text

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Severity
Critical · CVSS 9.6
Type
Security updates
Tags
Microsoft Edge (Chromium-based), 2026-Sep
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Edge · verify against the original
Review Recommended

Chromium CVE-2026-95281: Buffer overflow in ANGLE

Microsoft Edge (Chromium-based) addresses a critical buffer overflow vulnerability (CVE-2026-95281) from Chromium. Administrators should review updates for potential impact.

What you should do

Review and apply the update to ensure security. AI-suggested

Details

Original Microsoft text

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Severity
Critical · CVSS 9.6
Type
Security updates
Tags
Microsoft Edge (Chromium-based), 2026-Sep
AI analysis
High priority · generated by qwen2.5:7b · possibly affects Edge · verify against the original
Review Recommended

Chromium CVE-2026-87628: Use after free in Cast

Microsoft Edge (Chromium-based) addresses a critical use-after-free vulnerability. Administrators should review for potential impacts.

What you should do

Review existing Edge configurations for any potential impacts and ensure updates are applied promptly. AI-suggested

Details

Original Microsoft text

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Severity
Critical
Type
Security updates
Tags
Microsoft Edge (Chromium-based), 2026-Sep
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Edge · verify against the original
Review Recommended

Chromium CVE-2026-87527: Buffer overflow in WebGL

Microsoft Edge (Chromium-based) addresses a critical buffer overflow vulnerability in WebGL. Administrators should review the Google Chrome Releases for more details.

What you should do

Review the Google Chrome Releases for any required actions or updates related to this vulnerability. AI-suggested

Details

Original Microsoft text

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Severity
Critical
Type
Security updates
Tags
Microsoft Edge (Chromium-based), 2026-Sep
AI analysis
Critical priority · generated by qwen2.5:7b · possibly affects Edge · verify against the original