[ CVE-2026-96187 · Published 29 Oct 2026 ]

Vulnerability in Microsoft Edge (Chromium-based)

CVSS 7.4 EPSS <1%2 agency advisoriesFix available

[ Description ]Official description

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

[ Fixes ]Fixes and patches

[ Advisories ]Government CERT advisories

  • BSI CERT-BundWID-SEC-2026-4204

    Microsoft Edge: Multiple vulnerabilities Translated from German

    CVE-2026-88077CVE-2026-96203CVE-2026-96196+8 more CVEs
  • CERT-FRCERTFR-2026-AVI-1395

    Multiple vulnerabilities in Microsoft Edge Translated from French

    Multiple vulnerabilities have been discovered in Microsoft Edge. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and a breach of data confidentiality.

    CVE-2026-106298CVE-2026-102299CVE-2026-102324+93 more CVEs

[ References ]References