🟠 High | Source: Microsoft Security Response Center
A out-of-bounds read vulnerability (CVE-2026-14396) has been identified in ANGLE, the graphics abstraction layer used by Chromium-based browsers. Microsoft Edge inherits this flaw from the underlying Chromium engine, meaning unpatched versions of Edge are potentially exposed. Out-of-bounds read vulnerabilities can be exploited to leak sensitive memory contents or, in certain conditions, facilitate further exploitation.
Security Architect’s Take: Ensure Microsoft Edge is updated to the latest Chromium-based release across all managed endpoints and virtual desktop environments, including Azure Virtual Desktop deployments. Validate that your endpoint management policies (e.g. Intune, WSUS) are enforcing browser updates promptly, particularly on devices with access to sensitive cloud management portals.
Original advisory: Chromium: CVE-2026-14396 Out of bounds read in ANGLE