CVE-2026-11629 on ZX Cloud Securityhttps://zxcloudsecurity.co.uk/tags/cve-2026-11629/Recent content in CVE-2026-11629 on ZX Cloud SecurityHugoen-GBMon, 16 Jun 2025 02:13:31 +0000CVE-2026-11629: Use-After-Free in Chromium Ozone & Edgehttps://zxcloudsecurity.co.uk/posts/microsoft-edge-chromium-cve-2026-11629-use-after-free-ozone/Tue, 16 Jun 2026 02:13:31 +0000https://zxcloudsecurity.co.uk/posts/microsoft-edge-chromium-cve-2026-11629-use-after-free-ozone/CVE-2026-11629 is a use-after-free flaw in Chromium's Ozone layer affecting Microsoft Edge. Learn the security impact and remediation steps.🟠 High  |  Source: Microsoft Security Response Center

A use-after-free vulnerability (CVE-2026-11629) has been identified in the Ozone windowing framework within the Chromium engine. Microsoft Edge, being Chromium-based, is affected and has ingested the fix from Google Chrome. Use-after-free flaws can allow attackers to execute arbitrary code by manipulating freed memory, potentially compromising the browser and the underlying system.

Security Architect’s Take: Ensure Microsoft Edge is updated to the latest Chromium-based release across all managed endpoints and virtual desktop environments, including Azure Virtual Desktop. Prioritise patching for any users accessing sensitive cloud consoles or internal tooling via Edge.

Original advisory: Chromium: CVE-2026-11629 Use after free in Ozone

]]>