CVE-2026-76023: Chromium CVE-2026-76023: Improper resource control in Linux Toolkit Theming

In plain language

What this advisory means

A security issue called CVE-2026-76023 was found in the Linux Toolkit Theming component of Chromium, the open-source browser engine behind Google Chrome and Microsoft Edge (Chromium-based). Microsoft Edge includes Chromium, and the latest Edge version 151.0.4129.107 contains the fix for this vulnerability, so users should update to this version to stay protected.

Technical explanation

How the issue affects the environment

CVE-2026-76023 identifies an improper resource control vulnerability within the Linux Toolkit Theming component of Chromium. This flaw could potentially allow unauthorized manipulation or exhaustion of system resources related to theming on Linux. Microsoft Edge, built on Chromium, inherits this vulnerability but addresses it in version 151.0.4129.107, which is based on Chromium version 151.0.7922.174. The specific remediation involves ingestion of updated Chromium source code that corrects the resource management issues.

Operational impact

Why teams should care

Organizations using Microsoft Edge (Chromium-based) risk exposure to system instability or potential privilege escalation due to improper resource handling until updating to the fixed version. Applying the update minimizes disruption and potential exploitation risks in enterprise deployments, maintaining security compliance and user trust.

Affected and fixed releases

Temporary risk reduction

No separate workaround was supplied in the source feed. Use the official vendor advisory before changing production controls.

Evidence and validation checklist

• Microsoft Security Response Center advisory confirms ingestion of Chromium fix in Edge 151.0.4129.107.
• Microsoft Edge release notes specify fix inclusion.
• CVE assignment and details published by Chromium project and relayed by Microsoft.
• Official guidance to update Microsoft Edge to the fixed version.