CVE-2026-96199: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Published Oct 16, 2026
·Updated
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Other sources
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
— Microsoft
Affected Software
3 affected componentsFixes available
Microsoft Edge (Chromium-based)<154.0.4258.37
154.0.4258.37
Microsoft Edge<154.0.4258.37
154.0.4258.37
Microsoft Edge Chromium<154.0.4258.37
Remediation
Event History
Oct 16, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeaknessAffected Software
Oct 29, 2026
CVE Published
via MITRE·03:09 PM
Data Sourced
via MITRE·03:09 PM
DescriptionSeverity
Data Sourced
via NVD·04:20 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
Does exploitation require an authenticated account or user interaction?
The CVSS vector indicates that no privileges are required, but user interaction is required. The attack vector is network-based and attack complexity is rated low.
2
Is an official remediation indicated?
The temporal CVSS metrics list the remediation level as official fix (RL:O). The provided data does not identify affected Edge versions or the specific update containing the fix.