CVE-2026-33118 – Microsoft Edge (Chromium-based) and Edge for Android Security Update
“Small browser bugs still open doors—this update quietly shuts them.”
Microsoft has released security updates addressing two vulnerabilities affecting Edge on desktop and Android platforms. CVE-2026-33118 impacts Chromium-based Edge, while CVE-2026-33119 affects Edge for Android. These issues could allow unintended behavior within the browser, increasing exposure risk during routine web activity.
CVE-2026-33118 has a CVSS score of 4.3, which is Medium severity. CVE-2026-33119 has a CVSS score of 5.4, which is Medium severity. Both vulnerabilities are moderate in impact but still relevant due to the browser’s role as a primary attack surface. There is no verified evidence of active exploitation or publicly available proof-of-concept code for either issue.
Key Details
- Affected Product
- Microsoft Edge Chromium
- Attack Vector
- Network
- Attack Complexity
- Low
- Privileges Required
- None
- User Interaction
- Required
- CWE Classification
- CWE-451