Microsoft 365

Security flaw patched in Chrome and Edge browsers

19h agoVia MicrosoftWritten for Lucame clients

A vulnerability has been found in the way Chromium-based browsers handle SVG files, which are a common image format used across the web. The flaw relates to improper input validation, meaning a malicious SVG file could potentially be used to do something the browser shouldn't allow. Google has patched it in Chrome, and Microsoft has pulled the same fix into Edge because Edge is built on the same underlying Chromium engine. Both browsers should update themselves automatically, but it's worth checking.

What this means for your business

If your staff use Chrome or Edge for day-to-day work, you'll want to make sure their browsers are on the latest version. Open the browser menu, go to Help, then About, and it'll check for updates on the spot. Most managed devices will pick this up without any action needed, but it's a quick thing to verify, especially on any machine that isn't centrally managed.

Reported by Microsoft. Original headline: Chromium: CVE-2026-118304 Improper input validation in SVG. Read the source at msrc.microsoft.com. This write-up is ours, not theirs.

Not sure whether this affects your setup? We can tell you in ten minutes.

Book a free IT review