[ CVE-2026-96198 · Published 29 Oct 2026 ]
Vulnerability in Microsoft Edge (Chromium-based)
CVSS 8.8
EPSS <1%2 agency advisoriesFix available
[ Description ]Official description
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
[ Fixes ]Fixes and patches
- Patch on msrc.microsoft.comVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD
[ Advisories ]Government CERT advisories
-
BSI CERT-BundWID-SEC-2026-4040
Microsoft Edge: Multiple vulnerabilities allow code execution Translated from German
-
CERT-FRCERTFR-2026-AVI-1342
Multiple vulnerabilities in Microsoft Edge Translated from French
Multiple vulnerabilities have been discovered in Microsoft Edge. They allow an attacker to cause remote arbitrary code execution and a security problem not specified by the vendor.
[ References ]References
- msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96198PatchVendor Advisory