Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
CVE-2026-96196
Summary
According to the CVSS metrics, successful exploitation of this vulnerability could lead to no loss of confidentiality (C:N) and integrity (I:N), but could lead to some loss of availability (A:L).
What does that mean for this vulnerability?
An attacker using either a specially-crafted page or a content script injected into a target page can show an extension's popup over a permission prompt or screen share dialog allowing the extension to spoof parts of the prompt's UI that shows its origin.
Products covered
Microsoft Edge (Chromium-based)
Remediation
Release Notes
Vendor-listed fixes
156.0.4314.42
CVEs in this advisory 1
Updates
- Published by Microsoft Security Response Center
The publication date reported by the vendor.
- Added to SecurityAlert
We collected the advisory from the official source.