{"id":"CVE-2026-96192","kind":"vulnerability","aliases":["CVE-2026-96192"],"related":[],"title":"Microsoft Edge for iOS: memory bug lets a network attacker run code","description":"Use after free in Microsoft Edge for iOS allows an unauthorized attacker to execute code over a network.","summary":"Microsoft Edge for iOS has a use-after-free memory bug that can be triggered over the network. Per the sources, an unauthorized attacker could execute code on the device.","severity":"high","cvss":8.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ios","ipad","iphone","microsoft-edge","package"],"not_affected_if":["not-using-edge-ios"],"how_to_check":"- Open Edge on iOS and check its version in Settings > About Microsoft Edge (source does not specify the exact path; unknown if the sources do not say)\n- Compare against the fixed version in the vendor advisory: unknown","fix":"- Microsoft Edge for iOS: unknown","status":"open","published_at":"2026-10-29T16:20:08+00:00","first_seen_at":"2026-10-29T16:26:03+00:00","triaged_at":"2026-10-29T16:27:56+00:00","updated_at":"2026-10-29T16:27:56+00:00","category":"package","confidence":0.5,"triage":{"at":"2026-10-29T16:27:56Z","model":"claude-haiku-5-5","output":{"fix":"- Microsoft Edge for iOS: unknown","reach":"network","title":"Microsoft Edge for iOS: memory bug lets a network attacker run code","impact":"high","summary":"Microsoft Edge for iOS has a use-after-free memory bug that can be triggered over the network. Per the sources, an unauthorized attacker could execute code on the device.","audience":"everyone","category":"package","nicknames":[],"who_cares":["microsoft-edge","ios","iphone","ipad"],"confidence":0.5,"fix_status":"unknown","needs_auth":"no","worst_case":"Attacker runs code on the device through a crafted network request","analyst_note":"Check the Microsoft Security Response Center entry for CVE-2026-96192 for the fixed Edge for iOS version and whether user interaction is needed.","how_to_check":"- Open Edge on iOS and check its version in Settings > About Microsoft Edge (source does not specify the exact path; unknown if the sources do not say)\n- Compare against the fixed version in the vendor advisory: unknown","plain_action":"Update Microsoft Edge on your iPhone from the App Store to the latest version.","needs_analyst":true,"not_affected_if":["not-using-edge-ios"],"who_is_affected":"People who use Microsoft Edge for iOS on an iPhone or iPad. The sources do not say which versions are affected or whether any special setting is required. Users of other browsers on iOS are not named in the sources.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000679,"input_tokens":4058,"output_tokens":547,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-2026':14A,17A '-96192':15A,18A 'allow':65C 'attack':10A,50B,68C 'bug':6A,37B 'code':12A,53B,71C 'could':51B 'cve':13A,16A 'devic':56B 'edg':2A,24B,27B,62C 'execut':52B,70C 'free':35B,59C 'io':4A,19B,29B,64C 'ipad':20B 'iphon':21B 'let':7A 'memori':5A,36B 'microsoft':1A,23B,26B,61C 'microsoft-edg':22B 'network':9A,44B,74C 'packag':25B 'per':45B 'run':11A 'sourc':47B 'trigger':41B 'unauthor':49B,67C 'use':33B,57C 'use-after-fre':32B","nicknames":[],"mitigations":[],"who_affected":"People who use Microsoft Edge for iOS on an iPhone or iPad. The sources do not say which versions are affected or whether any special setting is required. Users of other browsers on iOS are not named in the sources.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"everyone","plain_action":"Update Microsoft Edge on your iPhone from the App Store to the latest version.","first_public_at":"2026-10-29T16:20:08+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-96192","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96192","severity":null,"published_at":"2026-10-29T16:20:08+00:00","modified_at":"2026-10-29T16:20:08+00:00","first_seen_at":"2026-10-29T16:26:03+00:00","fetched_at":"2026-10-29T16:26:03+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}