Loading story…
Microsoft disclosed security vulnerabilities affecting Microsoft Edge (Chromium-based), with the Canadian Centre for Cyber Security warning that versions prior to 150.0.4078.99 are impacted. The advisory directs organizations to consult Microsoft's Security Update Guide for vulnerability details and remediation information tied to the affected browser release.
Government and industry notices amplified the advisory and urged users and administrators to apply relevant Edge updates as they become available. The guidance highlights the need for prompt patching across enterprise environments running outdated Edge installations to reduce exposure to the disclosed flaws.
See affected versions and whether adversaries are exploiting it.
1 event from the most recent confirmed update back to the earliest known activity.
A Microsoft security advisory identified vulnerabilities affecting Microsoft Edge (Chromium-based). The Canadian Centre for Cyber Security notice states that versions prior to 150.0.4078.99 were affected as of 2026-07-26.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
3 references tracked. Mallory keeps watching after this page renders.
malware.news
Open sourcecyber.gc.ca
Open sourcemsrc.microsoft.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Microsoft released security updates for **Microsoft Edge Stable Channel** to fix multiple vulnerabilities affecting earlier browser builds. One update covered versions prior to **`146.0.3856.72`**, and a later release addressed additional flaws in versions prior to **`147.0.3912.60`**. The advisories were highlighted by the Canadian Centre for Cyber Security, which said the fixes apply to Edge Stable Channel deployments exposed by outdated versions. The Canadian Centre for Cyber Security urged users and administrators to review Microsoft's release notes and deploy the updated Edge builds as soon as possible. Organizations running Edge Stable Channel versions below the patched releases were advised to update promptly to reduce exposure to known browser vulnerabilities.
Jun 29, 2026
The Canadian Centre for Cyber Security issued advisory **AV26-143** urging organizations to update **Microsoft Edge Stable** to remediate vulnerabilities affecting versions prior to `145.0.3800.58`. Microsoft indicated that **CVE-2026-2441** has an **available exploit**, increasing the likelihood of active or imminent abuse, and the advisory directs administrators to apply Microsoft’s February 2026 Edge security update. In parallel, Microsoft began rolling out **Edge 145** to the Stable channel with multiple enterprise security enhancements, including expanded data protection for *Edge for Business* (cross-tenant **Intune App Protection Policies**, DLP controls such as clipboard limits, watermarks, protected downloads, and leak controls for screenshots and developer tools). The release also adds stronger extension governance (detection/revocation of **malicious sideloaded extensions** and extension monitoring via the Edge management service) and improvements to password handling via a password affiliation service for related domains—changes that complement the security posture improvements delivered alongside the security fixes in the Edge 145 line.
Jun 29, 2026
Microsoft has published security advisories for a series of **Microsoft Edge (Chromium-based) information disclosure vulnerabilities** affecting the browser across multiple release cycles. The referenced issues include `CVE-2021-36929`, `CVE-2023-33145`, `CVE-2023-36880`, `CVE-2023-38158`, `CVE-2024-21423`, `CVE-2024-29987`, `CVE-2024-30056`, `CVE-2024-38103`, `CVE-2024-38222`, `CVE-2024-49025`, and `CVE-2025-49741`, all listed by Microsoft as information disclosure vulnerabilities in the Chromium-based Edge browser. The advisories provide limited public detail, but the volume and recurrence of these CVEs show an ongoing stream of browser security fixes tied to unintended exposure of sensitive information. For defenders, the immediate takeaway is to ensure **Microsoft Edge is kept fully updated** and to track MSRC guidance for affected versions, as browser-based information disclosure bugs can aid reconnaissance, weaken privacy protections, or support follow-on exploitation when chained with other vulnerabilities.
Jul 12, 2026