Skip to content

Vulnerabilities & Patches

Microsoft adds CVE-2026-118332 to Edge security update guidance

The Chromium Compositing flaw rates High severity and affects Chrome before version 156.0.8078.73.

By · 1 min read

https://breach-signal.com/vulnerabilities/microsoft-edge-cve-2026-118332-security-update/

Share

PremierePC published an alert on Oct. 31, 2026 saying Microsoft added CVE-2026-118332 to its security update guidance.

The Compositing component in Chromium contains an improper input validation flaw tracked as CVE-2026-118332. Chrome assigned the CVE identifier, and the flaw affects Microsoft Edge since the browser is Chromium-based and ingests Chromium.

The flaw reaches Google Chrome releases before 156.0.8078.73. Using a crafted HTML page, a remote attacker could run code outside the sandbox. Chromium rates the severity High.

For patch details, Microsoft points readers to Google Chrome Releases. CVE-2026-118332 carries an EPSS probability of 0.29%. cvefeed.io posted its detail page on Oct. 27, 2026.

Tags: , ,

Was this helpful?

Join the discussion

Please read our Comment Policy before commenting. First-time comments are held for moderation. By posting a comment you agree to our Terms of Use and Privacy Policy, which explain how your name, email address and comment are used.

Your email address will not be published. Required fields are marked *

Most read

  1. CERT-EU warns of critical PHP flaws CVE-2026-109618 and CVE-2026-109619
  2. EFF publishes more than 800 pages of Medicare WISeR records
  3. SANS ISC discloses a new ClickFix campaign targeting macOS and Windows users
  4. ENISA publishes SBOM guidance tying automation to supply chain security
  5. HHS lists iRhythm breach at 8,179,772 affected individuals

Most discussed

  1. OWASP Ranks Prompt Injection First in 2025 LLM Risk List: What Defenders Can Do 1