Live › vulnerability › CVE-2026-96199
Heap buffer overflow (CWE-122) in Chromium-based Microsoft Edge. A malicious web page can run code once the user visits it (CVSS 8.8, user interaction required). Fixed in the Oct 16 2026 Stable release per Tenable; no known exploitation or public PoC.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 16:26 UTC. All times on this page are UTC.
Anyone running a Chromium-based Microsoft Edge build that has not received the vendor fix. The sources do not describe the exact code path or required user interaction. unknown
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Microsoft Edge (Chromium-based) | vendor | < 155.0.4283.62 | 155.0.4283.62 |
155.0.4283.62, update and restart the browser155.0.4283.62 or later; is current as of Oct 22156.0.4314.42Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
This page as .md · .json · in your agent: get_signal("CVE-2026-96199")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.