Live › vulnerability › CVE-2026-96187
A type confusion flaw in Microsoft Edge (Chromium-based) lets an unauthorized attacker access resources with an incompatible type. The result is information disclosure over the network.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 16:26 UTC. All times on this page are UTC.
Anyone running Microsoft Edge (Chromium-based) older than build 155.0.4283.45. An attacker needs a user to click a crafted link and visit a malicious page, which could then read parts of browser process memory and might escape the browser sandbox. Machines with Edge auto-updated to the current build can skip it.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Microsoft Edge (Chromium-based) | vendor | < 155.0.4283.45 | 155.0.4283.45 |
155.0.4283.45; anything lower on the 155 line, or any version before 155, is vulnerableUpdate Microsoft Edge (Chromium-based) to 155.0.4283.45 or later (current Stable 156.0.4314.42 per release notes of Oct 22, 2026).
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
This page as .md · .json · in your agent: get_signal("CVE-2026-96187")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.