CVE-2026-96196
Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthorized…
- Risk score
- 63/100
- CVSS
- 8.8 v3.1
- Published
- 27 Oct 2026
Open in the live forecast Today's forecast
What to know
- What it is
- Microsoft Edge (Chromium-based) has an incomplete list of disallowed inputs, allowing an attacker to bypass a security feature over a network. An attacker could exploit this to gain high-level access, privileges, and potentially cause high-impact attacks.
- Affected
- {'product': 'Microsoft Edge (Chromium-based)', 'vendor': 'microsoft'}
- Fix
- Check the linked advisory for a fix, as none is provided in this record.
- Exploitation
- No known exploitation
Why it is Amber
- CVSS 8.8 high
- Remotely exploitable without logging in
- Named in a government or vendor bulletin
Government and vendor bulletins
References
Original description
Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.
Last activity 29 Oct 2026. Patch Forecast updates every hour.