Live › vulnerability › CVE-2026-96203
A use-after-free bug in Microsoft Edge (Chromium-based) lets an unauthorized attacker elevate privileges over a network. The sources give no further detail on the trigger or the exact privilege gained.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 16:26 UTC. All times on this page are UTC.
Anyone running Microsoft Edge (Chromium-based) older than 155.0.4283.45 is exposed; the attack comes over the network and needs the user to visit or open attacker content (user interaction required). Desktop users and managed fleets that pin or delay Edge updates matter most. Machines already auto-updated to Edge 155.0.4283.45 or newer can skip it.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Microsoft Edge (Chromium-based) | vendor | < 155.0.4283.45 | 155.0.4283.45 |
155.0.4283.45C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe).VersionInfo.ProductVersion155.0.4283.45 or later (per MSRC mirror; confirm on the MSRC page)156.0.4314.42Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.
This page as .md · .json · in your agent: get_signal("CVE-2026-96203")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.