CVE-2026-11628 on ZX Cloud Securityhttps://zxcloudsecurity.co.uk/tags/cve-2026-11628/Recent content in CVE-2026-11628 on ZX Cloud SecurityHugoen-GBMon, 16 Jun 2025 02:13:29 +0000CVE-2026-11628: Chromium Use-After-Free in Edgehttps://zxcloudsecurity.co.uk/posts/cve-2026-11628-chromium-use-after-free-ozone-microsoft-edge/Tue, 16 Jun 2026 02:13:29 +0000https://zxcloudsecurity.co.uk/posts/cve-2026-11628-chromium-use-after-free-ozone-microsoft-edge/CVE-2026-11628 is a use-after-free flaw in Chromium's Ozone component affecting Microsoft Edge. Update Edge immediately to mitigate potential code executio🟠 High  |  Source: Microsoft Security Response Center

A use-after-free vulnerability (CVE-2026-11628) has been identified in the Ozone display platform component of Chromium. Microsoft Edge, being Chromium-based, inherits this flaw and has been patched via Google’s upstream Chromium release. Use-after-free bugs can allow attackers to execute arbitrary code by manipulating freed memory, making them potentially severe.

Security Architect’s Take: Ensure Microsoft Edge is updated to the latest Chromium-based release across all managed endpoints and virtual desktop environments, including Azure Virtual Desktop deployments. Validate that your browser update policies enforce automatic patching and consider using Microsoft Endpoint Manager or Intune to confirm compliance.

Original advisory: Chromium: CVE-2026-11628 Use after free in Ozone

]]>