CVE-2026-96198: Buffer Overflow

Q: Does exploitation require an attacker account or user interaction?

The attacker does not need privileges, but exploitation requires user interaction. The vulnerability is reachable over a network and has low attack complexity.

Published Oct 16, 2026

Updated

Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Other sources

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

— Microsoft

Affected Software

1 affected componentFixes available

Microsoft Edge (Chromium-based)<154.0.4258.37

154.0.4258.37

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 154.0.4258.37

Event History

Oct 16, 2026

CVE Published

via Microsoft·02:00 PM

Data Sourced

via Microsoft·02:00 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

Does exploitation require an attacker account or user interaction?

The attacker does not need privileges, but exploitation requires user interaction. The vulnerability is reachable over a network and has low attack complexity.

CVE-2026-96198: Buffer Overflow

Other sources

Affected Software

Remediation

Event History

Frequently Asked Questions

Does exploitation require an attacker account or user interaction?

Company

Resources

Contact

Frequently Asked Questions

Does exploitation require an attacker account or user interaction?