Microsoft 365

Edge and Chrome patch SVG input flaw

19h agoVia MicrosoftWritten for Lucame clients

A security vulnerability has been found in the way Chromium-based browsers handle SVG graphics. The flaw involves improper input validation, which means malicious content could potentially be used to cause unexpected behaviour in the browser. Microsoft Edge picks up the fix from Google's Chromium project, so both browsers are affected and both are receiving the patch.

What this means for your business

If your staff use Chrome or Edge for day-to-day work, and most do, you'll want to make sure both browsers are updated as soon as possible. In practice this usually happens automatically, but it's worth checking that auto-updates haven't been disabled on any machines. If you're unsure, your IT team can confirm which version is running and push the update manually if needed.

Reported by Microsoft. Original headline: Chromium: CVE-2026-118315 Improper input validation in SVG. Read the source at msrc.microsoft.com. This write-up is ours, not theirs.

Not sure whether this affects your setup? We can tell you in ten minutes.

Book a free IT review