{"id":"CVE-2026-96196","kind":"vulnerability","aliases":["CVE-2026-96196"],"related":[],"title":"Microsoft Edge: incomplete input filter lets attackers bypass a security feature","description":"Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.","summary":"Microsoft Edge (Chromium-based) has an incomplete list of disallowed inputs (CWE-184) that lets a network attacker bypass a security feature once a user opens attacker-controlled content. MSRC says the bypassed safeguard is the path validation that checks which files may be changed and asks for approval for sensitive locations. Fixed in Edge 156.0.4314.42.","severity":"high","cvss":8.8,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Microsoft Edge (Chromium-based)","fixed":["156.0.4314.42"],"affected":"< 156.0.4314.42","ecosystem":"vendor"}],"ecosystems":[],"tags":["browser","chromium","microsoft-edge","runtime","windows"],"not_affected_if":["edge-156.0.4314.42-or-later","no-edge-installed"],"how_to_check":"Open edge://settings/help and confirm Edge is 156.0.4314.42 or later; anything older on the 156 line is exposed.","fix":"Update Microsoft Edge (Chromium-based) to 156.0.4314.42 or later (edge://settings/help, or your managed Edge update channel).","status":"open","published_at":"2026-10-29T16:20:08+00:00","first_seen_at":"2026-10-29T16:26:03+00:00","triaged_at":"2026-10-29T16:27:55+00:00","updated_at":"2026-10-29T16:34:51+00:00","category":"runtime","confidence":0.8,"triage":{"at":"2026-10-29T16:27:55Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"Microsoft Edge: incomplete input filter lets attackers bypass a security feature","impact":"medium","summary":"Microsoft Edge (Chromium-based) has an incomplete list of disallowed inputs that lets an unauthorized attacker get past a security feature over a network. The sources do not say what the bypassed feature protects or what the attacker can do after bypassing it.","audience":"everyone","category":"runtime","nicknames":[],"who_cares":["microsoft-edge","windows","chromium"],"confidence":0.4,"fix_status":"unknown","needs_auth":"no","worst_case":"Attacker bypasses an Edge security feature over the network","analyst_note":"Check the Microsoft MSRC advisory for CVE-2026-96196 for the affected Edge versions, the bypassed feature, and the fixed build.","how_to_check":"- Check the installed Edge version under edge://settings/help\n- unknown","plain_action":"Update Microsoft Edge to the latest version through its built-in update check.","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Anyone running a Chromium-based Microsoft Edge build affected by this flaw, which the sources do not identify by version. The sources do not say whether managed or enterprise deployments differ. unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000657,"input_tokens":4089,"output_tokens":496,"severity_before":"high"},"analyst_status":"done","analyst_note":"Check the Microsoft MSRC advisory for CVE-2026-96196 for the affected Edge versions, the bypassed feature, and the fixed build.","search":"'-184':43B '-2026':13A,16A '-96196':14A,17A '156.0.4314.42':87B 'allow':99C 'approv':80B 'ask':78B 'attack':7A,48B,58B,102C 'attacker-control':57B 'base':34B,98C 'based':22A 'browser':23B 'bypass':8A,49B,64B,104C 'chang':76B 'check':71B 'chromium':21A,24B,33B,97C 'chromium-bas':32B,96C 'chromium-based':20A 'content':60B 'control':59B 'cve':12A,15A 'cwe':42B 'disallow':40B,91C 'edg':2A,27B,31B,86B,95C 'edge':19A 'featur':11A,52B,107C 'file':73B 'filter':5A 'fix':84B 'incomplet':3A,37B,88C 'input':4A,41B,92C 'let':6A,45B 'list':38B,89C 'locat':83B 'may':74B 'microsoft':1A,18A,26B,30B,94C 'microsoft-edg':25B 'msrc':61B 'network':47B,110C 'open':56B 'path':68B 'runtim':28B 'safeguard':65B 'say':62B 'secur':10A,51B,106C 'sensit':82B 'unauthor':101C 'user':55B 'valid':69B 'window':29B","nicknames":[],"mitigations":[],"who_affected":"Anyone running Microsoft Edge (Chromium-based) older than 156.0.4314.42, on any desktop platform. Exploitation needs the user to open or load attacker-controlled content, so machines where people browse the web or open files from outside are the ones to patch first. Servers with no Edge installed can skip it; Edge normally auto-updates.","tier":"B","verified":{"fix":{"at":"2026-10-29T16:34:51Z","by":"analyst","doc":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96196","run_id":1063},"products":{"at":"2026-10-29T16:34:51Z","by":"analyst","doc":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96196","run_id":1063},"how_to_check":{"at":"2026-10-29T16:34:51Z","by":"analyst","doc":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96196","run_id":1063}},"analyst_revisit_at":null,"fix_status":"available","audience":"everyone","plain_action":"Update Microsoft Edge to the latest version: open the menu, then Settings > About Microsoft Edge, and let it update and restart.","first_public_at":"2026-10-29T16:20:08+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-96196","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96196","severity":null,"published_at":"2026-10-29T16:20:08+00:00","modified_at":"2026-10-29T16:20:08+00:00","first_seen_at":"2026-10-29T16:26:03+00:00","fetched_at":"2026-10-29T16:26:03+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-96196:1063","url":null,"severity":null,"published_at":"2026-10-29T16:34:51+00:00","modified_at":"2026-10-29T16:34:51+00:00","first_seen_at":"2026-10-29T16:34:51+00:00","fetched_at":"2026-10-29T16:34:51+00:00","note":"Read MSRC page: CWE-184, Edge fixed in 156.0.4314.42 (released Oct 27 2026), not exploited, not publicly disclosed, no PoC. CERT-FR says 156.x before 156.0.4314.42; its second range (<149.0.4022.62) belongs to another CVE in the bulletin, not confirmed for this one. No workaround or mitigation on MSRC. X not searched (low-profile, no named issue)."}],"documents":[{"id":17780,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96196","title":"MSRC: CVE-2026-96196 Edge (Chromium-based) Security Feature Bypass","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null},{"id":17781,"url":"https://www.cert.cyber.gouv.fr/avis/CERTFR-2026-AVI-1405/","title":"CERT-FR CERTFR-2026-AVI-1405 Microsoft Edge","kind":"other","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"mentions","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}