CVE-2026-96187: High severity Microsoft Edge (Chromium-based) vulnerability
Published Oct 26, 2026
·Updated
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
Other sources
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
— Microsoft
Affected Software
1 affected componentFixes available
Microsoft Edge (Chromium-based)<155.0.4283.45
155.0.4283.45
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 155.0.4283.45
Event History
Oct 26, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What does an attacker need to exploit this vulnerability?
The attacker can attempt exploitation over a network without prior privileges, but user interaction is required. The available data does not specify the form of interaction or delivery method.
2
What is the potential impact?
Successful exploitation may allow disclosure of information. The supplied severity vector indicates no integrity or availability impact, while the scope is changed.