Summary
Impact: Security Feature Bypass. Microsoft rating: Important. Not known to be exploited. Customer action: Required.
Details
What kind of security feature could be bypassed by successfully exploiting this vulnerability?
Successful exploitation could bypass the path validation safeguards that check which files may be changed and require user approval for sensitive locations, allowing changes to protected files without the user’s knowledge or consent.
According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?
The user must open or load attacker‑controlled content—such as importing a malicious WSDL or opening a file—so the application processes it and triggers the vulnerability.
Security updates
156.0.4314.50 — https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security
Vulnerabilities 1
-
High 8.8
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.
Revision history
-
#1
Information published.
References
-
CVE-2026-96196 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96196
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss