CVE-2026-20942: Medium severity Microsoft Edge (Chromium-based) vulnerability
Published Oct 27, 2026
·Updated
Improper restriction of rendered ui layers or frames in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
Other sources
Microsoft Edge (Chromium-based) Spoofing Vulnerability
— Microsoft
Affected Software
1 affected componentFixes available
Microsoft Edge (Chromium-based)<156.0.4314.42
156.0.4314.42
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 156.0.4314.42
Event History
Oct 27, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·02:00 PM
Affected Software