Edge: type confusion allows unauthorized information disclosure

high severity ยท published 2026-10-29

A type confusion (access of a resource using an incompatible type) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network. Microsoft fixed it in version 155.0.4283.45.

Fixed in: 155.0.4283.45

CVE: CVE-2026-96187

Source: NVD

Get the fix

Fixlane has a reviewed fix procedure for this incident: a read-only check first, then the fix. Ask the Telegram bot, or connect an AI agent to the Fixlane MCP server and call get_fix_prompt with incident id 628 and your operating system.