Microsoft 365

Memory flaw found in Chrome and Edge media handling

19h agoVia MicrosoftWritten for Lucame clients

A vulnerability has been found in the Chromium engine that both Google Chrome and Microsoft Edge are built on. It involves memory corruption in the media component, meaning a malicious site or file could potentially cause the browser to behave in unintended ways. Google has issued a fix through Chrome, and Microsoft has followed with an Edge update that pulls in the same patch.

What this means for your business

If your staff are using Chrome or Edge — and most will be — you'll want to make sure both browsers are up to date as soon as possible. In practice that means checking that automatic updates haven't been paused or blocked, particularly on managed devices. It's a straightforward update, but memory corruption flaws are taken seriously because they can sometimes be exploited to run malicious code without the user doing anything obviously wrong.

Reported by Microsoft. Original headline: Chromium: CVE-2026-118311 Memory corruption in Media. Read the source at msrc.microsoft.com. This write-up is ours, not theirs.

Not sure whether this affects your setup? We can tell you in ten minutes.

Book a free IT review