Browser Security
The latest Browser Security coverage — news, analysis, and updates from the WindowsNews.AI desk.
CVE-2026-57992: Edge Update Fixes Critical RCE Flaw—And a Dangerous Patch Gap
Microsoft shipped an emergency update for Edge Stable on July 2 that patches a remote code execution vulnerability—tracked as CVE-2026-57992—that attackers could exploit simply by luring a victim...
A Single Webpage Can Hijack Your PC: Patch Edge 150.0.4078.48 Right Now
{ "title": "A Single Webpage Can Hijack Your PC: Patch Edge 150.0.4078.48 Right Now", "content": "A solitary visit to a booby-trapped website could hand attackers complete control over your...
Microsoft Fixes Edge Autofill Flaw That Could Allow Remote Code Execution
Microsoft released a security patch on July 3, 2026, for a remote code execution vulnerability in its Edge browser. The bug, tracked as CVE-2026-57985, lurked in the browser’s autofill feature. An...
Update Microsoft Edge Now to Block a New Remote Code Execution Attack
Microsoft has disclosed a critical remote code execution vulnerability in its Edge browser and released a security patch that demands immediate attention from users and IT administrators alike. The...
Edge Browser Flaw Exposed Users’ Local Files – Microsoft Patches with Urgent Update
Microsoft has patched a troubling vulnerability in its Edge browser that could allow attackers to secretly read files stored on a user’s computer. The flaw, cataloged as CVE-2026-55945, was...
Microsoft Ships Emergency Fix for High-Severity RCE Flaw CVE-2026-50521 in Edge
Microsoft has released an out-of-band security update for its Edge browser to address a high-severity remote code execution (RCE) vulnerability identified as CVE-2026-50521. The advisory, initially...
Critical Chrome Update Seals High-Severity Site Isolation Bypass—Update to 149.0.7827.197 Now
A newly disclosed vulnerability in Google Chrome undermines one of the browser's most critical security defenses, Site Isolation, potentially allowing attackers who have already compromised the...
Urgent Chrome Update: CVE-2026-13026 Use-After-Free Fixed in Version 149.0.7827.197 — Windows Teams Must Patch Immediately
Google shipped an out-of-band update for Chrome on June 24, 2026, plugging a high-severity vulnerability that could let attackers execute arbitrary code on a victim’s machine. The fix arrives in...
CVE-2026-12461: Edge Users Must Confirm WebRTC Fix After Chromium Flaw Exposes Data
Microsoft has officially acknowledged CVE-2026-12461, a security flaw in the WebRTC component of Chromium that puts Microsoft Edge users at risk. The company documented the vulnerability in its...
Microsoft Edge’s Chromium Engine Gets Urgent Patch for Use-After-Free CVE-2026-12449
Microsoft issued a critical security update for its Edge browser on June 17, 2026, plugging a severe use-after-free vulnerability in the Chromium open-source engine that underpins the browser....
CVE-2026-12467: Microsoft Flags Critical Chromium Use-After-Free in Edge – Update Now to Stay Safe
Microsoft has issued an urgent security advisory for CVE-2026-12467, a use-after-free vulnerability lurking in the Chromium open-source code that underpins Microsoft Edge. The flaw, documented in the...
Microsoft Flags Critical Chromium Bug CVE-2026-12460: Edge Users Must Update Now
Microsoft has officially acknowledged a newly assigned vulnerability, CVE-2026-12460, in its Security Update Guide, confirming that the flaw resides in the Chromium open-source codebase shared by...