CVE-2026-96196: High severity Microsoft Edge (Chromium-based) vulnerability

Q: What access does an attacker need to exploit this issue?

The issue is rated as network-reachable with low attack complexity and requires no privileges. Exploitation does require user interaction.

Q: What could successful exploitation allow?

Successful exploitation could allow an unauthorized attacker to bypass a security feature. The supplied severity vector indicates potential high impact to confidentiality, integrity, and availability.

Q: Is exploitation known to be occurring?

The supplied data marks exploitation status as unknown.

Published Oct 27, 2026

Updated

Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.

Other sources

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

— Microsoft

Affected Software

1 affected componentFixes available

Microsoft Edge (Chromium-based)<156.0.4314.42

156.0.4314.42

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 156.0.4314.42

Event History

Oct 27, 2026

CVE Published

via Microsoft·02:00 PM

Data Sourced

via Microsoft·02:00 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The issue is rated as network-reachable with low attack complexity and requires no privileges. Exploitation does require user interaction.

What could successful exploitation allow?

Successful exploitation could allow an unauthorized attacker to bypass a security feature. The supplied severity vector indicates potential high impact to confidentiality, integrity, and availability.

Is exploitation known to be occurring?

The supplied data marks exploitation status as unknown.

CVE-2026-96196: High severity Microsoft Edge (Chromium-based) vulnerability

Other sources

Affected Software

Remediation

Event History

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What could successful exploitation allow?

Is exploitation known to be occurring?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What could successful exploitation allow?

Is exploitation known to be occurring?