Skip to content

Exploited: 178

LatestCVE-2026-115732 — Certificate Name Authorization Bypass

8.8

CVE-2026-96203Fix available

Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

Microsoft Edge2026-10-29 16:20 UTC1 min readRead in

Summary

Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

Remediation

Inventory every Microsoft Edge deployment, including staging.
Upgrade Microsoft Edge to 155.0.4283.45.
Confirm the running version after the upgrade.

References

Patchhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96203

CVSS vector

Attack vector: Network
Complexity: Low
Privileges: None
User interaction: Required
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected versions

Version	Fixed in
– <155.0.4283.45	155.0.4283.45

Weakness

CWE-416

Exploit probability (EPSS)

0.6%

Timeline

2026-10-29Publicly disclosed

Sources

NVD