Live › vulnerability › CVE-2026-96198
A heap-based buffer overflow in Chromium-based Microsoft Edge lets an unauthorized attacker run code over the network. The sources give no further detail on the trigger or affected versions.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 16:26 UTC. All times on this page are UTC.
Anyone running Microsoft Edge (Chromium-based) older than 154.0.4258.37 on Windows or macOS. An attacker has to get a user to open crafted content, so the risk is highest on workstations that browse the web or open files from outside. Machines on an Edge version at or above 154.0.4258.37 can skip it.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Microsoft Edge (Chromium-based) | vendor | < 154.0.4258.37 | 154.0.4258.37 |
154.0.4258.37, you are exposedUpdate Microsoft Edge (Chromium-based) to 154.0.4258.37 or later (edge://settings/help).
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
This page as .md · .json · in your agent: get_signal("CVE-2026-96198")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.