CVE-2026-96198: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Published Oct 16, 2026
·Updated
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Other sources
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
— Microsoft
Affected Software
3 affected componentsFixes available
Microsoft Edge (Chromium-based)<154.0.4258.37
154.0.4258.37
Microsoft Edge<154.0.4258.37
154.0.4258.37
Microsoft Edge Chromium<154.0.4258.37
Remediation
Event History
Oct 16, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeaknessAffected Software
Oct 29, 2026
CVE Published
via MITRE·03:09 PM
Data Sourced
via MITRE·03:09 PM
DescriptionSeverity
Data Sourced
via NVD·04:20 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
Does exploitation require an attacker account or user interaction?
The attacker does not need privileges, but exploitation requires user interaction. The vulnerability is reachable over a network and has low attack complexity.