Security Advisory Desk
unratedQCS priority 70/100Microsoft

CVE-2026-76018: Chromium CVE-2026-76018: Privilege elevation in Import

A security issue in Chromium, assigned CVE-2026-76018, could let attackers gain higher privileges through its import functionality. Microsoft Edge, which uses Chromium technology, has included the fix in its latest update, so users are recommended to update to the fixed version to stay protected.

Published 8/9/2026, 7:00:00 amVerified 13/9/2026, 5:11:01 pmRevision 1
Microsoft unrated network security advisory visual

In plain language

What this advisory means

A security issue in Chromium, assigned CVE-2026-76018, could let attackers gain higher privileges through its import functionality. Microsoft Edge, which uses Chromium technology, has included the fix in its latest update, so users are recommended to update to the fixed version to stay protected.

Technical explanation

How the issue affects the environment

The vulnerability CVE-2026-76018 in Chromium involves privilege elevation during import operations—this means a malicious actor could exploit the import functionality to increase their access rights within the browser environment. Microsoft Edge, based on Chromium, inherits this vulnerability but has incorporated Chromium's fix in version 151.0.4129.107. Users should update to this version or later to mitigate the risk.

Operational impact

Why teams should care

If unpatched, this vulnerability could allow attackers to escalate privileges within the browser context, potentially leading to unauthorized actions or data exposure. Applying the update ensures the business environment that uses Microsoft Edge is safeguarded against this risk, maintaining secure browsing and compliance standards.

Immediate action

Update Microsoft Edge (Chromium-based) to version 151.0.4129.107 or later, which contains the fix from Chromium addressing the privilege elevation vulnerability in import functionality.

Affected and fixed releases

Affected versionsConfirm in the official vendor advisory
Fixed versions151.0.4129.107

Temporary risk reduction

No separate workaround was supplied in the source feed. Use the official vendor advisory before changing production controls.

Evidence and validation checklist

  • Microsoft Security Response Center advisory for CVE-2026-76018
  • Microsoft Edge release version 151.0.4129.107 containing Chromium fix
  • Official Microsoft documentation indicating ingestion of Chromium fixes in Edge releases.
  • Link to Microsoft Security Update Guide and Google Chrome Releases for further details.

Authoritative reference

Microsoft Security Response Center

QCS detected and normalized this record from the official source. Vendor guidance remains authoritative.

Open source