{"id":"CVE-2026-96198","kind":"vulnerability","aliases":["CVE-2026-96198"],"related":[],"title":"Microsoft Edge: heap buffer overflow lets a remote attacker run code","description":"Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.","summary":"A heap-based buffer overflow in Chromium-based Microsoft Edge lets an unauthorized attacker run code over the network. The sources give no further detail on the trigger or affected versions.","severity":"high","cvss":8.8,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"Microsoft Edge (Chromium-based)","fixed":["154.0.4258.37"],"affected":"< 154.0.4258.37","ecosystem":"vendor"}],"ecosystems":[],"tags":["chromium","macos","microsoft-edge","other","windows"],"not_affected_if":["patched-edge"],"how_to_check":"Open edge://settings/help or edge://version. If the version is below 154.0.4258.37, you are exposed. Update and restart Edge.","fix":"Update Microsoft Edge (Chromium-based) to 154.0.4258.37 or later (edge://settings/help).","status":"open","published_at":"2026-10-29T16:20:08+00:00","first_seen_at":"2026-10-29T16:26:03+00:00","triaged_at":"2026-10-29T16:27:52+00:00","updated_at":"2026-10-29T16:33:33+00:00","category":"other","confidence":0.8,"triage":{"at":"2026-10-29T16:27:52Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"Microsoft Edge: heap buffer overflow lets a remote attacker run code","impact":"high","summary":"A heap-based buffer overflow in Chromium-based Microsoft Edge lets an unauthorized attacker run code over the network. The sources give no further detail on the trigger or affected versions.","audience":"everyone","category":"other","nicknames":[],"who_cares":["microsoft-edge","chromium","windows","macos"],"confidence":0.5,"fix_status":"unknown","needs_auth":"no","worst_case":"Attacker runs code on the user's machine over the network","analyst_note":"Check the Microsoft Security Response Center advisory for CVE-2026-96198 for affected versions, fixed build and whether user interaction is needed.","how_to_check":"- Check the installed Edge version: unknown\n- Affected version ranges: unknown","plain_action":"Update Microsoft Edge to the latest version once Microsoft releases a fix.","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000616,"input_tokens":4080,"output_tokens":416,"severity_before":"high"},"analyst_status":"done","analyst_note":"Check the Microsoft Security Response Center advisory for CVE-2026-96198 for affected versions, fixed build and whether user interaction is needed.","search":"'-2026':13A,16A '-96198':14A,17A 'affect':61B 'allow':74C 'attack':9A,45B,77C 'base':33B,39B,65C,73C 'based':22A 'buffer':4A,34B,66C 'chromium':21A,23B,38B,72C 'chromium-bas':37B,71C 'chromium-based':20A 'code':11A,47B,80C 'cve':12A,15A 'detail':56B 'edg':2A,27B,41B,70C 'edge':19A 'execut':79C 'give':53B 'heap':3A,32B,64C 'heap-bas':31B,63C 'let':6A,42B 'maco':24B 'microsoft':1A,18A,26B,40B,69C 'microsoft-edg':25B 'network':50B,83C 'overflow':5A,35B,67C 'remot':8A 'run':10A,46B 'sourc':52B 'trigger':59B 'unauthor':44B,76C 'version':62B 'window':29B","nicknames":[],"mitigations":[],"who_affected":"Anyone running Microsoft Edge (Chromium-based) older than 154.0.4258.37 on Windows or macOS. An attacker has to get a user to open crafted content, so the risk is highest on workstations that browse the web or open files from outside. Machines on an Edge version at or above 154.0.4258.37 can skip it.","tier":"B","verified":{"fix":{"at":"2026-10-29T16:33:33Z","by":"analyst","doc":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96198","run_id":1062},"products":{"at":"2026-10-29T16:33:33Z","by":"analyst","doc":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96198","run_id":1062},"how_to_check":{"at":"2026-10-29T16:33:33Z","by":"analyst","doc":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96198","run_id":1062},"who_affected":{"at":"2026-10-29T16:33:33Z","by":"analyst","doc":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96198","run_id":1062}},"analyst_revisit_at":null,"fix_status":"available","audience":"everyone","plain_action":"Update Microsoft Edge: open the menu, choose Settings > About Microsoft Edge, and let it update and restart.","first_public_at":"2026-10-29T16:20:08+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-96198","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-96198","severity":null,"published_at":"2026-10-29T16:20:08+00:00","modified_at":"2026-10-29T16:20:08+00:00","first_seen_at":"2026-10-29T16:26:03+00:00","fetched_at":"2026-10-29T16:26:03+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-96198:1062","url":null,"severity":null,"published_at":"2026-10-29T16:33:33+00:00","modified_at":"2026-10-29T16:33:33+00:00","first_seen_at":"2026-10-29T16:33:33+00:00","fetched_at":"2026-10-29T16:33:33+00:00","note":"MSRC page read: heap overflow CWE-122, fixed in Edge 154.0.4258.37 (released Oct 16, table added Oct 26), not exploited, not publicly disclosed, 'Exploitation Less Likely'. MSRC FAQ oddly mentions a malicious Office file (likely boilerplate); Tenable lists <155.0.4283.62, which differs from MSRC; used MSRC. Edge 156.0.4314.42 stable was released Oct 22."}],"documents":[{"id":17759,"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96198","title":"MSRC: CVE-2026-96198 Microsoft Edge (Chromium-based) RCE","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}