Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
CVE-2026-96196
Summary
Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network.
Products covered
Microsoft Visual Studio 2026 version 18.8
.NET 10.0 installed on Mac OS
.NET 10.0 installed on Linux
.NET 8.0 installed on Windows
.NET 8.0 installed on Linux
.NET 8.0 installed on Mac OS
.NET 9.0 installed on Linux
.NET 9.0 installed on Mac OS
Show 2 more products
.NET 9.0 installed on Windows
Microsoft Visual Studio 2022 version 17.14
Remediation
Install KB5122106. Install KB5122104. Install KB5122105.
Vendor-listed fixes
18.8.3
10.0.11
8.0.30
9.0.19
17.14.38
CVEs in this advisory 1
Update history
What changed in later vendor updates
SecurityAlert records field-level changes from the point we begin following a bulletin. Earlier vendor changes may not have a field-by-field record.
- The vendor changed its remediation guidance.
Updates
- Published by Microsoft Security Response Center
The publication date reported by the vendor.
- Added to SecurityAlert
We collected the advisory from the official source.
- Confirmed at the source
Our collector saw this advisory during a later source check.